Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1bd2e431f2631a5bfc21a9e244bb28d4230dad825b9d6396afcd32458923fb0a

  • Size

    524KB

  • Sample

    211226-s2lrhaabfq

  • MD5

    0d9cc367aa4abc5620b6fcf8e9272f53

  • SHA1

    cb6db576bbe636a895d0ad3e3136483d0ec777be

  • SHA256

    1bd2e431f2631a5bfc21a9e244bb28d4230dad825b9d6396afcd32458923fb0a

  • SHA512

    f827b80e02a9fd180c6bc6d4261c1ce09d42f301f3137420942b8308688de5bbc6ed9d5945388f3ba5ac877f2211b5088b48fb72c8db10b97b81f0fdf60eb655

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

104.36.167.47:443

188.40.48.93:4664

162.241.33.132:9217

217.160.5.104:593
rc4.plain
rc4.plain

Targets

    • Target

      1bd2e431f2631a5bfc21a9e244bb28d4230dad825b9d6396afcd32458923fb0a

    • Size

      524KB

    • MD5

      0d9cc367aa4abc5620b6fcf8e9272f53

    • SHA1

      cb6db576bbe636a895d0ad3e3136483d0ec777be

    • SHA256

      1bd2e431f2631a5bfc21a9e244bb28d4230dad825b9d6396afcd32458923fb0a

    • SHA512

      f827b80e02a9fd180c6bc6d4261c1ce09d42f301f3137420942b8308688de5bbc6ed9d5945388f3ba5ac877f2211b5088b48fb72c8db10b97b81f0fdf60eb655

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks