Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a60310b0061a8a405bd7ee1067d4131997507cc9fbc5a0bf24ea8ebffdc46120

  • Size

    180KB

  • Sample

    211018-x2ncjsedc8

  • MD5

    31fa09fe01409e4a6094d18f2f6ab4f6

  • SHA1

    011d0c27b38d54e4b07cf6a8a589c2ce660591dc

  • SHA256

    a60310b0061a8a405bd7ee1067d4131997507cc9fbc5a0bf24ea8ebffdc46120

  • SHA512

    53fd1b50897949ba4ce130beb0668cf932f147c121ac0a7cbe67a84b4f51ddd044c1abee5f6c234d17f48c49460172c8d21cad7bb34a6193c34ef499a0eea044

Score
10/10
dridex22203botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

195.154.146.84:443

45.56.121.87:8116

157.245.222.44:5723
rc4.plain
rc4.plain

Targets

    • Target

      a60310b0061a8a405bd7ee1067d4131997507cc9fbc5a0bf24ea8ebffdc46120

    • Size

      180KB

    • MD5

      31fa09fe01409e4a6094d18f2f6ab4f6

    • SHA1

      011d0c27b38d54e4b07cf6a8a589c2ce660591dc

    • SHA256

      a60310b0061a8a405bd7ee1067d4131997507cc9fbc5a0bf24ea8ebffdc46120

    • SHA512

      53fd1b50897949ba4ce130beb0668cf932f147c121ac0a7cbe67a84b4f51ddd044c1abee5f6c234d17f48c49460172c8d21cad7bb34a6193c34ef499a0eea044

    Score
    10/10
    dridex22203botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks