Overview

overview

10

Static

static

Dridex_f54...a3.dll

windows7_x64

10

Dridex_f54...a3.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Dridex_f54781f5c41ce33227923791ecfd591cb0cbfd446d0d537ca5b2e9477cbf6da3.zip

  • Size

    166KB

  • Sample

    220628-r9yklaabbq

  • MD5

    aa3777004ffedacc163c425ecb9b69c5

  • SHA1

    ff433ed86ff6c83341693ffcd5d8371802cd88cd

  • SHA256

    a860b50967a6416348c79d9b82540c8dbe17ad1852c249ebd1c8d6dc94c9930e

  • SHA512

    1fde4cf110caaffb97d4e00385aa8e30582f244f5889243932e7025988ba65b124b2bf5652e95ca8c33d8a30aa67a4e48209b19ca43d0357285b3101bb88f46b

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.91.122.102:443

85.10.248.28:593

185.4.135.27:5228

80.211.3.13:8116
rc4.plain
rc4.plain

Targets

    • Target

      Dridex_f54781f5c41ce33227923791ecfd591cb0cbfd446d0d537ca5b2e9477cbf6da3.bin

    • Size

      532KB

    • MD5

      c08b8320332d85132eb961c85f92152d

    • SHA1

      cc93f8dfd22b6120efc51be65c63c30807d05306

    • SHA256

      f54781f5c41ce33227923791ecfd591cb0cbfd446d0d537ca5b2e9477cbf6da3

    • SHA512

      3f01c9fe136db19933034978d03cf9924d583d1d516feafd80abf7b160587bb8ca2529258a4bc13d896b012acbabdf3087594ad123f4de5fc9a02eee391ef887

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks