Overview

overview

10

Static

static

260db67880...a6.exe

windows7_x64

10

260db67880...a6.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    260db678801137488c7c048a9df213ab927747018c0351723155e135faa347a6

  • Size

    204KB

  • Sample

    220616-lsyalsdehj

  • MD5

    e6a9a8f486c5b28ff455b0055e8a9d2c

  • SHA1

    b97c0cf60c038016315ba0e21d83e566feeda921

  • SHA256

    260db678801137488c7c048a9df213ab927747018c0351723155e135faa347a6

  • SHA512

    0a69d4999d4584f9eb6fbb663dfb5e8b0869663ff08c864db9dcf2a5a5b750bd1d6f3aab7425b8058099cfbde6280a9857609825d18fa5ad83a6ae80a230d59e

Score
10/10
dridexbotnetloader

Malware Config

Extracted

Family

dridex

C2

45.137.151.151:443

50.116.86.205:8443

91.205.215.68:3389

107.170.24.125:8443

Targets

    • Target

      260db678801137488c7c048a9df213ab927747018c0351723155e135faa347a6

    • Size

      204KB

    • MD5

      e6a9a8f486c5b28ff455b0055e8a9d2c

    • SHA1

      b97c0cf60c038016315ba0e21d83e566feeda921

    • SHA256

      260db678801137488c7c048a9df213ab927747018c0351723155e135faa347a6

    • SHA512

      0a69d4999d4584f9eb6fbb663dfb5e8b0869663ff08c864db9dcf2a5a5b750bd1d6f3aab7425b8058099cfbde6280a9857609825d18fa5ad83a6ae80a230d59e

    Score
    10/10
    dridexbotnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks