Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0ff46dd634cbc886352741b0b5d4afc0a11c5dda4e6868dfb1eb98fb18fc7fe1

  • Size

    184KB

  • Sample

    210810-ybpe4x7d2j

  • MD5

    c797f38cba9717e07568adb0761977f7

  • SHA1

    efa4e9f8d1248cbb5fb20de7d02b8b09d1fe373e

  • SHA256

    0ff46dd634cbc886352741b0b5d4afc0a11c5dda4e6868dfb1eb98fb18fc7fe1

  • SHA512

    f19d66f74b5f3ab7a0cf786ed6cdd8a551c4d143b717ac0c9d27bb2943972bde2092c9ecc8460aaaf91e47d15ffdc4dd0b798333e6e2cc3a57df8a28c3ea69b8

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664
rc4.plain
rc4.plain

Targets

    • Target

      0ff46dd634cbc886352741b0b5d4afc0a11c5dda4e6868dfb1eb98fb18fc7fe1

    • Size

      184KB

    • MD5

      c797f38cba9717e07568adb0761977f7

    • SHA1

      efa4e9f8d1248cbb5fb20de7d02b8b09d1fe373e

    • SHA256

      0ff46dd634cbc886352741b0b5d4afc0a11c5dda4e6868dfb1eb98fb18fc7fe1

    • SHA512

      f19d66f74b5f3ab7a0cf786ed6cdd8a551c4d143b717ac0c9d27bb2943972bde2092c9ecc8460aaaf91e47d15ffdc4dd0b798333e6e2cc3a57df8a28c3ea69b8

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks