Overview

overview

10

Static

static

Dridex_de1...de.dll

windows7_x64

10

Dridex_de1...de.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Dridex_de171138107af68993856781363643f96bbfa0fc996b89f0cddb08e0b848cfde.zip

  • Size

    166KB

  • Sample

    220628-r95c5sbhe6

  • MD5

    bf38b5dc13d2603dd9362588cce4f2f7

  • SHA1

    1a3ad2288db098f4e2592863113d21e70de6c531

  • SHA256

    8b210e06b270a34351fd18f6204fe41f40801f5aab3abbf023d0e2f35aa3e403

  • SHA512

    f68de60285edcb0f57c444c88abbb20733aaa4cbb919a291b85615066cf23f4f5b13e0efec54375eb6ce0da8c97008e7cb6fd701ccb5e802f42f07516d43ed53

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.91.122.102:443

85.10.248.28:593

185.4.135.27:5228

80.211.3.13:8116
rc4.plain
rc4.plain

Targets

    • Target

      Dridex_de171138107af68993856781363643f96bbfa0fc996b89f0cddb08e0b848cfde.bin

    • Size

      532KB

    • MD5

      380e2a6c71cc64f136bd026da228e1d2

    • SHA1

      90f8ba34ee4428ca2860ffaf3d3062717e7d433b

    • SHA256

      de171138107af68993856781363643f96bbfa0fc996b89f0cddb08e0b848cfde

    • SHA512

      b64a4b5a1faa71a56d250c7399b6020f5252059ebb29b30ed3e39d0f2781b1c094cd9742265153fad5a32451e935197880af6f508a4f9715e88fc295637a2afa

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks