Overview

overview

10

Static

static

Dridex_36a...10.dll

windows7_x64

10

Dridex_36a...10.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Dridex_36a7ba45e945a04424bc1cde56afe70e748bab42bcf53ed459dd6f73bc3ce010.zip

  • Size

    166KB

  • Sample

    220628-r9t76sabbm

  • MD5

    69f8114bc4347d81e632a7e25fa96f43

  • SHA1

    b3f5421026184e2ca2da1020937ecdb9a3be9d23

  • SHA256

    4469b678b58079842dec75fce9f2172d00af273538a32b5f0c1e35687c25c44e

  • SHA512

    e6d72adf682cb6321cd1c4672831242bcfb0c46e80e52a3882c895b73ea58645d3c889adc9bd70a5bb3b5c1c88deaf761e621b593f97faece67add52d7917027

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.91.122.102:443

85.10.248.28:593

185.4.135.27:5228

80.211.3.13:8116
rc4.plain
rc4.plain

Targets

    • Target

      Dridex_36a7ba45e945a04424bc1cde56afe70e748bab42bcf53ed459dd6f73bc3ce010.bin

    • Size

      532KB

    • MD5

      4c8f094f4b573355a82d18fe80fa150d

    • SHA1

      7f49ff6226e02399ba95bfbedf543cc6810629ac

    • SHA256

      36a7ba45e945a04424bc1cde56afe70e748bab42bcf53ed459dd6f73bc3ce010

    • SHA512

      e8733f5f29afb8f1db1f93018e13920d486c4667bb667684b7952594fb0a4d3480167712ec3a0bf39b2fa1778d0890999e31d3e8c030a6bae34032c18a7e15ab

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks