dridex | 115aadf551d130f5485bc57f0eb7a5dad8182cd27072772fd07f6b30846704e3 | Triage

Sharing

General

Target

115aadf551d130f5485bc57f0eb7a5dad8182cd27072772fd07f6b30846704e3
Size

662KB
Sample

220502-ah52xsfcc2
MD5

23f6bb92bc26d91c85dc5bc7ef39dc13
SHA1

d447edcb50992d48047098e4d5cefc6f5ff0d380
SHA256

115aadf551d130f5485bc57f0eb7a5dad8182cd27072772fd07f6b30846704e3
SHA512

96792671ecc13f9ac5d4d526ca7bcb821e9a2355195a22fde51c5f5c4a805140b4f235351b59d00687bc1c576b648de40486aaf55190093a2615e9f683039592

Score

10^/10

dridex 10111 botnet loader

Malware Config

Extracted

Family

dridex

Botnet

10111

C2

5.9.178.143:443

185.230.161.62:3389

2.58.16.89:8443

rc4.plain

rc4.plain

Targets

- Target
  
  115aadf551d130f5485bc57f0eb7a5dad8182cd27072772fd07f6b30846704e3
- Size
  
  662KB
- MD5
  
  23f6bb92bc26d91c85dc5bc7ef39dc13
- SHA1
  
  d447edcb50992d48047098e4d5cefc6f5ff0d380
- SHA256
  
  115aadf551d130f5485bc57f0eb7a5dad8182cd27072772fd07f6b30846704e3
- SHA512
  
  96792671ecc13f9ac5d4d526ca7bcb821e9a2355195a22fde51c5f5c4a805140b4f235351b59d00687bc1c576b648de40486aaf55190093a2615e9f683039592
Score

10^/10

dridex 10111 botnet loader
- Dridex
  Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
  botnet dridex
- Dridex Loader 'dmod' strings
  Detects 'dmod' strings in Dridex loader.
  botnet loader
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

dridex10111botnetloader

behavioral2