Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e0bf459144e90267f0b99cf54a7bafab47caaeefa121cc4bf5e07a08203bbee8

  • Size

    244KB

  • Sample

    211018-ygz2aaeed9

  • MD5

    492b13980703a88a61c1fbb2ee23f11b

  • SHA1

    e342fdf4c490b9a97b0af4eeeb835432f7e02973

  • SHA256

    e0bf459144e90267f0b99cf54a7bafab47caaeefa121cc4bf5e07a08203bbee8

  • SHA512

    40b7ceaff6fa5b9ce780f881b85cb6b212293a99abddb8485ce51f9146634552061f339a00935b37100bcacda56dd74532303e4d3ee6b0e3e007526bebd2d704

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

195.154.146.84:443

45.56.121.87:8116

157.245.222.44:5723
rc4.plain
rc4.plain

Targets

    • Target

      e0bf459144e90267f0b99cf54a7bafab47caaeefa121cc4bf5e07a08203bbee8

    • Size

      244KB

    • MD5

      492b13980703a88a61c1fbb2ee23f11b

    • SHA1

      e342fdf4c490b9a97b0af4eeeb835432f7e02973

    • SHA256

      e0bf459144e90267f0b99cf54a7bafab47caaeefa121cc4bf5e07a08203bbee8

    • SHA512

      40b7ceaff6fa5b9ce780f881b85cb6b212293a99abddb8485ce51f9146634552061f339a00935b37100bcacda56dd74532303e4d3ee6b0e3e007526bebd2d704

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks