Overview

overview

10

Static

static

fa241e69ab...72.exe

windows7_x64

10

fa241e69ab...72.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fa241e69ab0fe614283f53e81b31ea926ae1ea4e4bfbc051728f9b7277adef72

  • Size

    172KB

  • Sample

    220625-l6fbysabc4

  • MD5

    6699fa15ef1ee8eb137d7a5ef73b22f9

  • SHA1

    a791f706fe3a3ba405a67fc0720601f287dbff10

  • SHA256

    fa241e69ab0fe614283f53e81b31ea926ae1ea4e4bfbc051728f9b7277adef72

  • SHA512

    d3511b4718bdefc777130e3b58cc2560f70b13171c713b42e2373f5cc45ad653e8571b53588a627be49260d0848959381a96fdcecfce1767280e04b3e4d3ac8b

Score
10/10
dridexbotnetloader

Malware Config

Extracted

Family

dridex

C2

5.196.1.113:4433

82.146.55.23:691

131.0.103.194:3389

92.222.219.26:4433

178.62.19.173:3389

Targets

    • Target

      fa241e69ab0fe614283f53e81b31ea926ae1ea4e4bfbc051728f9b7277adef72

    • Size

      172KB

    • MD5

      6699fa15ef1ee8eb137d7a5ef73b22f9

    • SHA1

      a791f706fe3a3ba405a67fc0720601f287dbff10

    • SHA256

      fa241e69ab0fe614283f53e81b31ea926ae1ea4e4bfbc051728f9b7277adef72

    • SHA512

      d3511b4718bdefc777130e3b58cc2560f70b13171c713b42e2373f5cc45ad653e8571b53588a627be49260d0848959381a96fdcecfce1767280e04b3e4d3ac8b

    Score
    10/10
    dridexbotnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks