Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd321dd675720bb14806eb4a24630461bc00c86e8fd240151dee42899081c9ff

  • Size

    552KB

  • Sample

    211224-l5nlyadfak

  • MD5

    6389beefa606ecdf6dde97aa07adf91f

  • SHA1

    e20eec6c39eecf9bbeb09fd4efaac98e8de0c2fb

  • SHA256

    fd321dd675720bb14806eb4a24630461bc00c86e8fd240151dee42899081c9ff

  • SHA512

    6d48db12e8fc7c7adb0ca69ef8e01d705d7f3aa135b740b8b6fc96922ec8150f09b7531c335890a328b1b453752469a12fc6b71df4913f106661a4e0fd387994

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.91.122.102:443

85.10.248.28:593

185.4.135.27:5228

80.211.3.13:8116
rc4.plain
rc4.plain

Targets

    • Target

      fd321dd675720bb14806eb4a24630461bc00c86e8fd240151dee42899081c9ff

    • Size

      552KB

    • MD5

      6389beefa606ecdf6dde97aa07adf91f

    • SHA1

      e20eec6c39eecf9bbeb09fd4efaac98e8de0c2fb

    • SHA256

      fd321dd675720bb14806eb4a24630461bc00c86e8fd240151dee42899081c9ff

    • SHA512

      6d48db12e8fc7c7adb0ca69ef8e01d705d7f3aa135b740b8b6fc96922ec8150f09b7531c335890a328b1b453752469a12fc6b71df4913f106661a4e0fd387994

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks