Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3ed31acf1c76a5113d8445f71c5a31cfc447c9206d79d7346e91c5fbf2580120

  • Size

    552KB

  • Sample

    211224-msapzsdfdq

  • MD5

    eda07197b2531ada96d2f626410fe0bc

  • SHA1

    2b3735876da691449235d1d6ddd25a2760211762

  • SHA256

    3ed31acf1c76a5113d8445f71c5a31cfc447c9206d79d7346e91c5fbf2580120

  • SHA512

    cbcf2b529436ed2dea8bcdcb0b2d37fbd43c913e829f9fb2ae07c045b6b25d22c8281f940274e1b655268041d0a4614a3348e559f7cf93a61456782d788fc021

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.91.122.102:443

85.10.248.28:593

185.4.135.27:5228

80.211.3.13:8116
rc4.plain
rc4.plain

Targets

    • Target

      3ed31acf1c76a5113d8445f71c5a31cfc447c9206d79d7346e91c5fbf2580120

    • Size

      552KB

    • MD5

      eda07197b2531ada96d2f626410fe0bc

    • SHA1

      2b3735876da691449235d1d6ddd25a2760211762

    • SHA256

      3ed31acf1c76a5113d8445f71c5a31cfc447c9206d79d7346e91c5fbf2580120

    • SHA512

      cbcf2b529436ed2dea8bcdcb0b2d37fbd43c913e829f9fb2ae07c045b6b25d22c8281f940274e1b655268041d0a4614a3348e559f7cf93a61456782d788fc021

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks