Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    781eb8553b3ca720f4d2e13808c349663937d49a4e735b9c7cd792e4343f7df9

  • Size

    180KB

  • Sample

    211021-f1e64sagaq

  • MD5

    3db9494ba19459c1c47680286771d913

  • SHA1

    6f0f8c56a83388bb50699187bc2c85b0389c6bc5

  • SHA256

    781eb8553b3ca720f4d2e13808c349663937d49a4e735b9c7cd792e4343f7df9

  • SHA512

    98cb65afc4e9d88a1fe5b1bccfb271ab01d6769c4a4f05be3ed419ee3984ab436972ce6f93a4d366e56abe166ebc4334adba05cc7eb1b4de94b7c3ac8c675879

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

155.138.203.91:443

207.180.220.242:8116

46.101.142.214:6891
rc4.plain
rc4.plain

Targets

    • Target

      781eb8553b3ca720f4d2e13808c349663937d49a4e735b9c7cd792e4343f7df9

    • Size

      180KB

    • MD5

      3db9494ba19459c1c47680286771d913

    • SHA1

      6f0f8c56a83388bb50699187bc2c85b0389c6bc5

    • SHA256

      781eb8553b3ca720f4d2e13808c349663937d49a4e735b9c7cd792e4343f7df9

    • SHA512

      98cb65afc4e9d88a1fe5b1bccfb271ab01d6769c4a4f05be3ed419ee3984ab436972ce6f93a4d366e56abe166ebc4334adba05cc7eb1b4de94b7c3ac8c675879

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks