Overview

overview

10

Static

static

Dridex_043...f9.dll

windows7_x64

10

Dridex_043...f9.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Dridex_04314613785677f2790e60074119f36d5744df93941c32a5ed37d6b4f577d6f9.zip

  • Size

    166KB

  • Sample

    220628-r91d7abhc8

  • MD5

    bd82a9572b2df9c5fb11f86457321cf5

  • SHA1

    f98091e65d7cae470661c7b2632b335379d6695c

  • SHA256

    cedd79524aad4388b4ad66b58458507fd18ddc987edb04f96a5efcd69863adff

  • SHA512

    cfd28e1a1e460a73ee47752e0a617a20d0b08205e8cee471e215124bad9234e080fdeef53141d1b78d86784d770c1a3c6863bb32914121e6331f2e6c577e4e68

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.91.122.102:443

85.10.248.28:593

185.4.135.27:5228

80.211.3.13:8116
rc4.plain
rc4.plain

Targets

    • Target

      Dridex_04314613785677f2790e60074119f36d5744df93941c32a5ed37d6b4f577d6f9.bin

    • Size

      532KB

    • MD5

      8e0c08453e4c227a71f0cf6879b5891a

    • SHA1

      bffd3e5e66cd05211b70a69dbdebf12b9201ccaf

    • SHA256

      04314613785677f2790e60074119f36d5744df93941c32a5ed37d6b4f577d6f9

    • SHA512

      858146b50d5fa8cb468919131142a48b98e029f8462b29fa6e87c8e0c1cf2406644568688729019eacf781d254d1320ef138b263ef03caea30114826a28cb7e6

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks