Overview

overview

10

Static

static

2c04c84990...36.exe

windows7_x64

10

2c04c84990...36.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2c04c849908e241a87084ca254309fd8a74a8b744928f1a2dc2c081ae241a436

  • Size

    160KB

  • Sample

    220615-aghv1afhc2

  • MD5

    0dad665d561bacd1fdc5750f14f1b437

  • SHA1

    73d5b310f9ff880ad751e5dc8f75b2a23ac941a2

  • SHA256

    2c04c849908e241a87084ca254309fd8a74a8b744928f1a2dc2c081ae241a436

  • SHA512

    55934acf250f6dcd261a4d50476b4955545f4577b8f846dca7e82e456239b53240044ee631a6567ee6e4831b9f648a7d159d7a1d96bcdbef36a2e6c8efe96d19

Score
10/10
dridexbotnetloader

Malware Config

Extracted

Family

dridex

C2

212.68.198.234:443

212.129.37.217:3389

174.136.5.242:1801

Targets

    • Target

      2c04c849908e241a87084ca254309fd8a74a8b744928f1a2dc2c081ae241a436

    • Size

      160KB

    • MD5

      0dad665d561bacd1fdc5750f14f1b437

    • SHA1

      73d5b310f9ff880ad751e5dc8f75b2a23ac941a2

    • SHA256

      2c04c849908e241a87084ca254309fd8a74a8b744928f1a2dc2c081ae241a436

    • SHA512

      55934acf250f6dcd261a4d50476b4955545f4577b8f846dca7e82e456239b53240044ee631a6567ee6e4831b9f648a7d159d7a1d96bcdbef36a2e6c8efe96d19

    Score
    10/10
    dridexbotnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks