Overview

overview

10

Static

static

Dridex_215...52.dll

windows7_x64

10

Dridex_215...52.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Dridex_215dcfed2662b6c7271ccc2f9b3310dced8f3ffff6ce81c35e3ace792212e152.zip

  • Size

    166KB

  • Sample

    220628-r9x9tsabbp

  • MD5

    fcf7e2777b932633174c39fcbe41fcde

  • SHA1

    3e37527af82069a5d28cbe3766037b433b2d163a

  • SHA256

    2ca58c94db8b707ff046d2187784e2183cf01780768947a044e41b2af04910fc

  • SHA512

    7e07eecf647c545f5d628ee55c90c56b52a4ae07f9dbf0508542485a3d61b4ec640b51da7b4dff6c31907a925fdf412b2d1725d8b565b32f8c39314c59e7ecaf

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.91.122.102:443

85.10.248.28:593

185.4.135.27:5228

80.211.3.13:8116
rc4.plain
rc4.plain

Targets

    • Target

      Dridex_215dcfed2662b6c7271ccc2f9b3310dced8f3ffff6ce81c35e3ace792212e152.bin

    • Size

      532KB

    • MD5

      f7599a080e61e0dc8c3b794b428f8ea8

    • SHA1

      64119ed034d9569ad4aec5e7e5babdbfba0656cc

    • SHA256

      215dcfed2662b6c7271ccc2f9b3310dced8f3ffff6ce81c35e3ace792212e152

    • SHA512

      cca58d59d650f33ba060f94e1b6b93fc35028014e5e9b94ae42e9ee8b2ff1aa86dcdfbeb9546950382b12c1d3c00c6540a66c8c1e4a0fea036467776a9a5341b

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks