Overview

overview

10

Static

static

3c3690e8fc...df.exe

windows7_x64

10

3c3690e8fc...df.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3c3690e8fc56ed8294bae35a2a75753ffdd0899f0955e3f4cd777f7f2c465bdf

  • Size

    204KB

  • Sample

    220703-j5bahabfel

  • MD5

    93103673e2cfdb9bd362a23015b35368

  • SHA1

    ab1607a738bae1dcf3253017e1d7ada82699f80e

  • SHA256

    3c3690e8fc56ed8294bae35a2a75753ffdd0899f0955e3f4cd777f7f2c465bdf

  • SHA512

    c4a853e0ad639b37773d49cafebab37f04951d53d596a7ed4350e2f8373ca881648e050b29aff6708399493d7f208883675e6c22ddad3d02157c9f30889ea33a

Score
10/10
dridexbotnet

Malware Config

Extracted

Family

dridex

C2

5.196.15.119:443

46.105.131.72:443

157.7.163.144:3389

199.119.78.9:4143

Targets

    • Target

      3c3690e8fc56ed8294bae35a2a75753ffdd0899f0955e3f4cd777f7f2c465bdf

    • Size

      204KB

    • MD5

      93103673e2cfdb9bd362a23015b35368

    • SHA1

      ab1607a738bae1dcf3253017e1d7ada82699f80e

    • SHA256

      3c3690e8fc56ed8294bae35a2a75753ffdd0899f0955e3f4cd777f7f2c465bdf

    • SHA512

      c4a853e0ad639b37773d49cafebab37f04951d53d596a7ed4350e2f8373ca881648e050b29aff6708399493d7f208883675e6c22ddad3d02157c9f30889ea33a

    Score
    10/10
    dridexbotnet

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks