Overview

overview

10

Static

static

Dridex_a7e...f0.dll

windows7_x64

10

Dridex_a7e...f0.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Dridex_a7efe0ee7f8d77a65b1fff3ba0cee76acb43223365dc348fa43ceecf93bcf7f0.zip

  • Size

    165KB

  • Sample

    220628-r97s9sabgq

  • MD5

    45d5658a3185d8e831f8eec09d3014c0

  • SHA1

    c18b2f2eb7c54e022f85d2055e4672760c7b0b7b

  • SHA256

    a0f6b8e86581e521dd49d8461b094fbbdc978833c4a1bca6bd47fda7fc31e08f

  • SHA512

    da36c5942ff5f65c725ca885cee7217f3d2464d202e7a98394a85edb3094c6ba0175f87857e3ba4331829efd1267e046dfe98b3af90ed8223c134177534372c4

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.91.122.102:443

85.10.248.28:593

185.4.135.27:5228

80.211.3.13:8116
rc4.plain
rc4.plain

Targets

    • Target

      Dridex_a7efe0ee7f8d77a65b1fff3ba0cee76acb43223365dc348fa43ceecf93bcf7f0.bin

    • Size

      532KB

    • MD5

      5c9f3e803604beb0fd134699e214db4c

    • SHA1

      3e775ec10dce6ce1bfc8c7aa299eef7e762c5fcc

    • SHA256

      a7efe0ee7f8d77a65b1fff3ba0cee76acb43223365dc348fa43ceecf93bcf7f0

    • SHA512

      b9a1d3d646c998e8406698c3e4a25827de905f65cdd940cfaa396aa9d16ef9773fc0f6af29b68b697d7eee54004fdac431a09706877bd97f0a5c409d735f2a13

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks