Overview

overview

10

Static

static

triage_dro...le.dll

windows7_x64

10

triage_dro...le.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    triage_dropped_file

  • Size

    552KB

  • Sample

    211223-r61wjsaggr

  • MD5

    7d424a845f21f905b17fb1e4ece26bc4

  • SHA1

    129162c17505204008b8c6345f78d8bd8e9d9548

  • SHA256

    7f62e9d0e2cb7358202052b4b20f43cec7eed7db11c57cfb372f8fddfb9307a3

  • SHA512

    abc7141739ffb23ba3e982796e697e33a5c3108fa7910cf97ca4fc6a1e9dbdadbd10b27665da4829f753794df3f0d2a79adfc9aee91863d60ec70042309bc6a6

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.91.122.102:443

85.10.248.28:593

185.4.135.27:5228

80.211.3.13:8116
rc4.plain
rc4.plain

Targets

    • Target

      triage_dropped_file

    • Size

      552KB

    • MD5

      7d424a845f21f905b17fb1e4ece26bc4

    • SHA1

      129162c17505204008b8c6345f78d8bd8e9d9548

    • SHA256

      7f62e9d0e2cb7358202052b4b20f43cec7eed7db11c57cfb372f8fddfb9307a3

    • SHA512

      abc7141739ffb23ba3e982796e697e33a5c3108fa7910cf97ca4fc6a1e9dbdadbd10b27665da4829f753794df3f0d2a79adfc9aee91863d60ec70042309bc6a6

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks