Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b3dbdfe68df9ff59d5dbf2fe5cfa1af03af7b3aa88f300af63457947c1e515d0

  • Size

    244KB

  • Sample

    211018-x2nnbafdbm

  • MD5

    bad08e3e2cd605bb4143b859a0adb9f0

  • SHA1

    59386f864987dcfd1d74354e6fb98031a24829b4

  • SHA256

    b3dbdfe68df9ff59d5dbf2fe5cfa1af03af7b3aa88f300af63457947c1e515d0

  • SHA512

    a9870cd45e884160cded25607ec60b632cc73173ebe919bad1d67a6181956219fba504eb8f56002be8fd29da3ec89e4111753de6abb42719e448c33208dc4b44

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

195.154.146.84:443

45.56.121.87:8116

157.245.222.44:5723
rc4.plain
rc4.plain

Targets

    • Target

      b3dbdfe68df9ff59d5dbf2fe5cfa1af03af7b3aa88f300af63457947c1e515d0

    • Size

      244KB

    • MD5

      bad08e3e2cd605bb4143b859a0adb9f0

    • SHA1

      59386f864987dcfd1d74354e6fb98031a24829b4

    • SHA256

      b3dbdfe68df9ff59d5dbf2fe5cfa1af03af7b3aa88f300af63457947c1e515d0

    • SHA512

      a9870cd45e884160cded25607ec60b632cc73173ebe919bad1d67a6181956219fba504eb8f56002be8fd29da3ec89e4111753de6abb42719e448c33208dc4b44

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks