Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7f6c9e12378f25dcb15b33cac561c027bc8c4cfeab8a41588fd7fd9faca96d30

  • Size

    180KB

  • Sample

    211018-z5vbdafgel

  • MD5

    30b913484349656a5d564683014b3123

  • SHA1

    92c62b5ab0bdc8abe527793734ce50d301d19832

  • SHA256

    7f6c9e12378f25dcb15b33cac561c027bc8c4cfeab8a41588fd7fd9faca96d30

  • SHA512

    3f7f00ce39d4d293d475e0b8d1e0521c4c1abbbb34942ca9d927ae5f50c275feaf884a198f105e2dc0764721c56b3ff2a47884f9cac1165920ece8515819e697

Score
10/10
dridex22203botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

195.154.146.84:443

45.56.121.87:8116

157.245.222.44:5723
rc4.plain
rc4.plain

Targets

    • Target

      7f6c9e12378f25dcb15b33cac561c027bc8c4cfeab8a41588fd7fd9faca96d30

    • Size

      180KB

    • MD5

      30b913484349656a5d564683014b3123

    • SHA1

      92c62b5ab0bdc8abe527793734ce50d301d19832

    • SHA256

      7f6c9e12378f25dcb15b33cac561c027bc8c4cfeab8a41588fd7fd9faca96d30

    • SHA512

      3f7f00ce39d4d293d475e0b8d1e0521c4c1abbbb34942ca9d927ae5f50c275feaf884a198f105e2dc0764721c56b3ff2a47884f9cac1165920ece8515819e697

    Score
    10/10
    dridex22203botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks