dridex | 0f805102c77684494cffc5df1e75e97990f83f58e6845d16f02888db03b2159e | Triage

Submit
Reports

Overview

overview

Static

static

dridex

windows10_x64

Sharing

General

Target

0f805102c77684494cffc5df1e75e97990f83f58e6845d16f02888db03b2159e
Size

180KB
Sample

211021-y42tdsafh7
MD5

74e4a2208c91735a96bfbbba392b221a
SHA1

38855ddf26cc33d307132386c20cff6bf7846aaf
SHA256

0f805102c77684494cffc5df1e75e97990f83f58e6845d16f02888db03b2159e
SHA512

9fc2b724b63c75b3ea7e44a95d9e9cdfa181a5d81ab7a0b445b727101e93592f9ea4b5f2e57f83f0f3f5934f628b31e1f38d724cb4b7fdaf03a21b29843f65d8

Score

10^/10

dridex 22201 botnet loader

Static task

static1

Behavioral task

behavioral1

Sample

0f805102c77684494cffc5df1e75e97990f83f58e6845d16f02888db03b2159e.dll

Resource

win10-en-20210920

dridex 22201 botnet loader

windows10_x64

0 signatures

0 seconds

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

212.237.17.99:443

176.28.17.160:6602

51.254.140.238:8333

rc4.plain

rc4.plain

Targets

- Target
  
  0f805102c77684494cffc5df1e75e97990f83f58e6845d16f02888db03b2159e
- Size
  
  180KB
- MD5
  
  74e4a2208c91735a96bfbbba392b221a
- SHA1
  
  38855ddf26cc33d307132386c20cff6bf7846aaf
- SHA256
  
  0f805102c77684494cffc5df1e75e97990f83f58e6845d16f02888db03b2159e
- SHA512
  
  9fc2b724b63c75b3ea7e44a95d9e9cdfa181a5d81ab7a0b445b727101e93592f9ea4b5f2e57f83f0f3f5934f628b31e1f38d724cb4b7fdaf03a21b29843f65d8
Score

10^/10

dridex 22201 botnet loader
- Dridex
  Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
  botnet dridex
- Dridex Loader
  Detects Dridex both x86 and x64 loader in memory.
  botnet loader
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

dridex22201botnetloader

© 2018-2024

Terms | Privacy