Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1b8bca9df2ce17770075563a17faa0aa0906c1a89ca127738acf7f0bd9530664

  • Size

    180KB

  • Sample

    211021-rcre1sbcdp

  • MD5

    96f40ac0c0c7fc5477e69cdbde704e2f

  • SHA1

    b27aaabea10fb55e2f6ef3d9d108c70e89d23a4f

  • SHA256

    1b8bca9df2ce17770075563a17faa0aa0906c1a89ca127738acf7f0bd9530664

  • SHA512

    9bdd669f8c12380ef69d037b74ddfcd55a0faf7046c3094b7c8c0f9bb3a3c2852834d2951e7548d2ea55ad39bc495b839ce0240a08e4c5eaea997262203f9a42

Score
10/10
dridex22202botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

155.138.203.91:443

207.180.220.242:8116

46.101.142.214:6891
rc4.plain
rc4.plain

Targets

    • Target

      1b8bca9df2ce17770075563a17faa0aa0906c1a89ca127738acf7f0bd9530664

    • Size

      180KB

    • MD5

      96f40ac0c0c7fc5477e69cdbde704e2f

    • SHA1

      b27aaabea10fb55e2f6ef3d9d108c70e89d23a4f

    • SHA256

      1b8bca9df2ce17770075563a17faa0aa0906c1a89ca127738acf7f0bd9530664

    • SHA512

      9bdd669f8c12380ef69d037b74ddfcd55a0faf7046c3094b7c8c0f9bb3a3c2852834d2951e7548d2ea55ad39bc495b839ce0240a08e4c5eaea997262203f9a42

    Score
    10/10
    dridex22202botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks