dridex | 55647a7a108f2e9a62afe8830e0b59a793d0d1df5b4bfe0248224d886862ee01 | Triage

Analysis

max time kernel
136s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
01-03-2022 06:17

Sharing

Report Analysis Logs

General

Target

55647a7a108f2e9a62afe8830e0b59a793d0d1df5b4bfe0248224d886862ee01.exe
Size

504KB
MD5

85eaf16d9df09443faa5de014c6f5bc3
SHA1

100086a5470e1d9dcef0d60b925fbb7ee3535925
SHA256

55647a7a108f2e9a62afe8830e0b59a793d0d1df5b4bfe0248224d886862ee01
SHA512

ef541e557192e7154214add73aae3005fb3f868927bbc1c8e776bf95242d4f28402dc3abb233785186a82984f43e2121122040ec750797a890916fb205fbca20

Score

10^/10

dridex 10111 botnet

Malware Config

Extracted

Family

dridex

Botnet

10111

C2

5.9.178.143:443

2.58.16.89:8443

37.139.2.140:3889

rc4.plain

rc4.plain

Signatures

Dridex
Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
botnet dridex

C:\Users\Admin\AppData\Local\Temp\55647a7a108f2e9a62afe8830e0b59a793d0d1df5b4bfe0248224d886862ee01.exe
"C:\Users\Admin\AppData\Local\Temp\55647a7a108f2e9a62afe8830e0b59a793d0d1df5b4bfe0248224d886862ee01.exe"
1⤵
PID:604

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/604-130-0x00000000021C0000-0x00000000021FC000-memory.dmp

Filesize
240KB

Download
memory/604-131-0x0000000000400000-0x000000000043D000-memory.dmp

Filesize
244KB

Download