dridex | 48cfbb10d7cfec67e737d376835132865e4d55db838793bc73f30132b5d04b6f | Triage

Sharing

General

Target

48cfbb10d7cfec67e737d376835132865e4d55db838793bc73f30132b5d04b6f
Size

148KB
Sample

220714-b76kesbcd5
MD5

84cfcd3f0944567a7bd62b9ebcdea920
SHA1

e192e5db0a32955f06bddd9902d474502b17d248
SHA256

48cfbb10d7cfec67e737d376835132865e4d55db838793bc73f30132b5d04b6f
SHA512

c62c266ce3e04bcb7479986c9ff3cb58fb8f7742aef830b90bed2ed7cb1784d29f9f1c96558e8ead79b4fa5195022b5bab5c99dc433874a2ba161d37d395ea6c

Score

10^/10

dridex botnet

Malware Config

Extracted

Family

dridex

C2

104.131.7.40:443

95.211.148.20:1443

89.22.103.32:3389

37.59.1.74:3389

Targets

- Target
  
  48cfbb10d7cfec67e737d376835132865e4d55db838793bc73f30132b5d04b6f
- Size
  
  148KB
- MD5
  
  84cfcd3f0944567a7bd62b9ebcdea920
- SHA1
  
  e192e5db0a32955f06bddd9902d474502b17d248
- SHA256
  
  48cfbb10d7cfec67e737d376835132865e4d55db838793bc73f30132b5d04b6f
- SHA512
  
  c62c266ce3e04bcb7479986c9ff3cb58fb8f7742aef830b90bed2ed7cb1784d29f9f1c96558e8ead79b4fa5195022b5bab5c99dc433874a2ba161d37d395ea6c
Score

10^/10

dridex botnet
- Dridex
  Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
  botnet dridex
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2