Overview

overview

10

Static

static

c50cad80e5...38.exe

windows7-x64

10

c50cad80e5...38.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c50cad80e5a599707702cef4562e1c1d6e7f0a4073c3cbfd97785d8a461f1a38

  • Size

    204KB

  • Sample

    220724-1le8sahfhl

  • MD5

    a141792943f60a710b67024197d336eb

  • SHA1

    a929a9de4252b44e24ed3f45dcfaae925b606930

  • SHA256

    c50cad80e5a599707702cef4562e1c1d6e7f0a4073c3cbfd97785d8a461f1a38

  • SHA512

    c2afad6d445444b919b3db80c6be228a57ed0df159ff3943e57a66b93cc74efba4c8a3b0ca539ed9d678601c63d33f20fea185cb16eb0ca509969745291e45c5

Score
10/10
dridexbotnetloader

Malware Config

Extracted

Family

dridex

C2

45.137.151.151:443

50.116.86.205:8443

91.205.215.68:3389

107.170.24.125:8443

Targets

    • Target

      c50cad80e5a599707702cef4562e1c1d6e7f0a4073c3cbfd97785d8a461f1a38

    • Size

      204KB

    • MD5

      a141792943f60a710b67024197d336eb

    • SHA1

      a929a9de4252b44e24ed3f45dcfaae925b606930

    • SHA256

      c50cad80e5a599707702cef4562e1c1d6e7f0a4073c3cbfd97785d8a461f1a38

    • SHA512

      c2afad6d445444b919b3db80c6be228a57ed0df159ff3943e57a66b93cc74efba4c8a3b0ca539ed9d678601c63d33f20fea185cb16eb0ca509969745291e45c5

    Score
    10/10
    dridexbotnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks