Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8a9bcb64e46267636419e039a75a27a3a025d36a1b7cc4abfcd8a035b12b99a6

  • Size

    552KB

  • Sample

    211224-ct8naschdq

  • MD5

    1a72e330d0ebca06e1986d9b611d5312

  • SHA1

    f031fd1bb33d390fb347355845b82102ea81a41e

  • SHA256

    8a9bcb64e46267636419e039a75a27a3a025d36a1b7cc4abfcd8a035b12b99a6

  • SHA512

    a7d8d841cb1365766e871e94afcafef8d9b91b08d4617844b63e201e6ce0533494669ed2c2f5c4c4442f57cd54e618398c7540eea62d2b5576ae7f78b45a191a

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.91.122.102:443

85.10.248.28:593

185.4.135.27:5228

80.211.3.13:8116
rc4.plain
rc4.plain

Targets

    • Target

      8a9bcb64e46267636419e039a75a27a3a025d36a1b7cc4abfcd8a035b12b99a6

    • Size

      552KB

    • MD5

      1a72e330d0ebca06e1986d9b611d5312

    • SHA1

      f031fd1bb33d390fb347355845b82102ea81a41e

    • SHA256

      8a9bcb64e46267636419e039a75a27a3a025d36a1b7cc4abfcd8a035b12b99a6

    • SHA512

      a7d8d841cb1365766e871e94afcafef8d9b91b08d4617844b63e201e6ce0533494669ed2c2f5c4c4442f57cd54e618398c7540eea62d2b5576ae7f78b45a191a

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks