Overview

overview

10

Static

static

178ba564b3...e1.exe

windows7_x64

10

178ba564b3...e1.exe

windows10-2004_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    178ba564b39bd07577e974a9b677dfd86ffa1f1d0299dfd958eb883c5ef6c3e1

  • Size

    208KB

  • Sample

    220205-xg9eaaeda2

  • MD5

    6a8401448a5bd2b540850f811b20a66d

  • SHA1

    9f01d4442c495c7128649b98201187bc0c58dedd

  • SHA256

    178ba564b39bd07577e974a9b677dfd86ffa1f1d0299dfd958eb883c5ef6c3e1

  • SHA512

    87680152e6ed8a294c824cddb559797c0ff9f7106e8e9d16fc8f0195c338566b9cdd76a8bf79ae23450625466bdf54af30a1c91939f93b204604d7deb7e00dd8

Score
10/10
dridex40400botnet

Malware Config

Extracted

Family

dridex

Botnet

40400

C2

132.255.244.130:443

111.67.77.202:3389

198.50.236.57:443

45.122.223.13:8443
rc4.plain
rc4.plain

Targets

    • Target

      178ba564b39bd07577e974a9b677dfd86ffa1f1d0299dfd958eb883c5ef6c3e1

    • Size

      208KB

    • MD5

      6a8401448a5bd2b540850f811b20a66d

    • SHA1

      9f01d4442c495c7128649b98201187bc0c58dedd

    • SHA256

      178ba564b39bd07577e974a9b677dfd86ffa1f1d0299dfd958eb883c5ef6c3e1

    • SHA512

      87680152e6ed8a294c824cddb559797c0ff9f7106e8e9d16fc8f0195c338566b9cdd76a8bf79ae23450625466bdf54af30a1c91939f93b204604d7deb7e00dd8

    Score
    10/10
    dridex40400botnet

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks