Overview

overview

10

Static

static

9

Dridex_607...bc.exe

windows7_x64

10

Dridex_607...bc.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Dridex_607b61007b50f376827b01c32ce04d653fffe96e41991bf320dcb9501d83e1bc.zip

  • Size

    363KB

  • Sample

    220628-r9353sbhe4

  • MD5

    76a80cc91d5c9282b5ddc807c596e70d

  • SHA1

    ac628ec78b5102b1a6cf73671704371d8cad204e

  • SHA256

    883518d49a087711bf5f08e627f6793f9cfdde5fb4ede9b7ca031a03720e2522

  • SHA512

    f456da467b155d5fc0c4f6cdd79bba08d34e00947b167e06dbab5227c7ea07bb38de753f5ff339edf6b3852f4ceea3d004c76be5f33d36bdfead467d316a9266

Score
10/10
dridex10111botnetcryptoneloaderpacker

Malware Config

Extracted

Family

dridex

Botnet

10111

C2

120.138.97.98:443

49.212.179.180:3889

27.254.174.70:4443
rc4.plain
rc4.plain

Targets

    • Target

      Dridex_607b61007b50f376827b01c32ce04d653fffe96e41991bf320dcb9501d83e1bc.bin

    • Size

      823KB

    • MD5

      c761bb46e53fb703c76e3f1d33006eff

    • SHA1

      e6a7f54057a15eab23aab41cbbcfe8ad801486a0

    • SHA256

      607b61007b50f376827b01c32ce04d653fffe96e41991bf320dcb9501d83e1bc

    • SHA512

      78c0301701a322bba84e15e575086b64cd76e507e70eebb9ab600bc7de07002900646fb80f4cdbedfef0d352cd89e466a63805d8c2e3236a6b1d525789891f61

    Score
    10/10
    dridex10111botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader 'dmod' strings

      Detects 'dmod' strings in Dridex loader.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks