Overview

overview

10

Static

static

8ce233abad...12.exe

windows7-x64

10

8ce233abad...12.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8ce233abad62a66852a8b41aa2e3142a62f71b39415af4fcb1a93f88003de712

  • Size

    152KB

  • Sample

    220724-1lfjjsheb5

  • MD5

    c4e901645d72d097963ae184dcf14c8b

  • SHA1

    97d6759d78bcc90290d7964ba4bd8a43a777f08b

  • SHA256

    8ce233abad62a66852a8b41aa2e3142a62f71b39415af4fcb1a93f88003de712

  • SHA512

    7604c9e874529be8851ef364ecea2e79867c333ffacf13f56d223571b64f05be2fe253f5b7cefe9ea129cb3a17d4b168a441d38414fc16ca33a0707bcf07e44d

Score
10/10
dridexbotnet

Malware Config

Extracted

Family

dridex

C2

162.213.37.188:443

178.128.20.11:3389

128.199.136.72:691

45.55.199.14:8443

Targets

    • Target

      8ce233abad62a66852a8b41aa2e3142a62f71b39415af4fcb1a93f88003de712

    • Size

      152KB

    • MD5

      c4e901645d72d097963ae184dcf14c8b

    • SHA1

      97d6759d78bcc90290d7964ba4bd8a43a777f08b

    • SHA256

      8ce233abad62a66852a8b41aa2e3142a62f71b39415af4fcb1a93f88003de712

    • SHA512

      7604c9e874529be8851ef364ecea2e79867c333ffacf13f56d223571b64f05be2fe253f5b7cefe9ea129cb3a17d4b168a441d38414fc16ca33a0707bcf07e44d

    Score
    10/10
    dridexbotnet

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks