Overview

overview

10

Static

static

Dridex_60b...9a.dll

windows7_x64

10

Dridex_60b...9a.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Dridex_60bd3eba4dac7d37cd07e375f4dbfe5e816b0ab599f28da31c5cf5b180b5849a.zip

  • Size

    166KB

  • Sample

    220628-r911qaabdl

  • MD5

    543118a0e25f7074c38771307df02090

  • SHA1

    2dc3525ff9e2059dc85b5b6152b75374d2230c92

  • SHA256

    b38faaea65e8d7631b27482f76a8280ffbff5adad90812e23d2b032abc8821fb

  • SHA512

    ae7cec92eb24d29f484b2de94fe0d3cbc6c37084eb0c4f762a09cfa78be3444436e7fea5eaa2f6132d0140d54c728cab61954a8682020c78a0777bf779a3fbe5

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.91.122.102:443

85.10.248.28:593

185.4.135.27:5228

80.211.3.13:8116
rc4.plain
rc4.plain

Targets

    • Target

      Dridex_60bd3eba4dac7d37cd07e375f4dbfe5e816b0ab599f28da31c5cf5b180b5849a.bin

    • Size

      532KB

    • MD5

      57cc0ec93c55348dd7b864e26ec96379

    • SHA1

      bcf46bb64fc5a673e7889d9ba9baad26bfab0ff7

    • SHA256

      60bd3eba4dac7d37cd07e375f4dbfe5e816b0ab599f28da31c5cf5b180b5849a

    • SHA512

      562b44d23cbfa0ccec2bee34dfd5cdbad64f87adc8b152c2874d9a4f5b249ff7dfa437aa150fe33e919b3aa3871bf8b92dcbc8cc11b47aed69e791e1d4a9a784

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks