Analysis
-
max time kernel
42s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
28-06-2022 14:54
General
-
Target
Dridex_ab5bb87e34b303765659b1567eacf38b27819af62e36ddee62da376890428795.exe
-
Size
246KB
-
MD5
94f3907ab8628f1a31e9d03d96fa58d6
-
SHA1
a200ff7ef8fa6d2de555100e94feffe5cf7a0948
-
SHA256
ab5bb87e34b303765659b1567eacf38b27819af62e36ddee62da376890428795
-
SHA512
6155a1932fddabd9c9c52e18e04121abd99a79bd85ef1e5368d02d642304699a1d996a582828736b8579367b13902bf593624e32433429ae0c221d7fade9e06e
Score
10/10
Malware Config
Extracted
Family
dridex
Botnet
10111
C2
178.128.83.165:443
92.38.128.47:3389
159.65.79.173:3886
153.122.13.133:1443
rc4.plain
rc4.plain
Signatures
-
Dridex
Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Dridex_ab5bb87e34b303765659b1567eacf38b27819af62e36ddee62da376890428795.exe"C:\Users\Admin\AppData\Local\Temp\Dridex_ab5bb87e34b303765659b1567eacf38b27819af62e36ddee62da376890428795.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
168KB
-
Filesize
252KB