Overview

overview

10

Static

static

3e8d77dd02...42.exe

windows7_x64

10

3e8d77dd02...42.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3e8d77dd02102c2ca94aacde3e3c03790b9c610308cfc96d8440b1592a337242

  • Size

    216KB

  • Sample

    220701-hjpekaabb8

  • MD5

    a597ba3b363b2362c3f7e6d35e72c6e7

  • SHA1

    c2ca5bf1396673c28de6b8bcf971f0a0354b4f04

  • SHA256

    3e8d77dd02102c2ca94aacde3e3c03790b9c610308cfc96d8440b1592a337242

  • SHA512

    c267fdb749a3c3a2a6cf9c6a708219fdecf4cf2e946678460860c985da9803e5a5dc9f028fe2ea406c9e435f0f89ee10c1142c5576bc74c6d74f6e5b4e921010

Score
10/10
dridexbotnetloader

Malware Config

Extracted

Family

dridex

C2

46.105.131.75:443

70.57.239.89:3389

66.228.47.181:443

198.199.106.229:5900

Targets

    • Target

      3e8d77dd02102c2ca94aacde3e3c03790b9c610308cfc96d8440b1592a337242

    • Size

      216KB

    • MD5

      a597ba3b363b2362c3f7e6d35e72c6e7

    • SHA1

      c2ca5bf1396673c28de6b8bcf971f0a0354b4f04

    • SHA256

      3e8d77dd02102c2ca94aacde3e3c03790b9c610308cfc96d8440b1592a337242

    • SHA512

      c267fdb749a3c3a2a6cf9c6a708219fdecf4cf2e946678460860c985da9803e5a5dc9f028fe2ea406c9e435f0f89ee10c1142c5576bc74c6d74f6e5b4e921010

    Score
    10/10
    dridexbotnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks