Overview

overview

10

Static

static

f24a6b05ff...e9.exe

windows7-x64

10

f24a6b05ff...e9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f24a6b05ff39fb749a39ef9c848f3e9be73807123729879e1cb130464ea193e9

  • Size

    292KB

  • Sample

    220724-vqpecscbeq

  • MD5

    d2629536720c268f7f7d262cc3ef94cb

  • SHA1

    121557a26d59e064c9c28bfa062aa8a832950200

  • SHA256

    f24a6b05ff39fb749a39ef9c848f3e9be73807123729879e1cb130464ea193e9

  • SHA512

    23206a1ca33e89b1ed2d103d1666a51a5c72515edacdf25a868cf408d28bba5275e2b7f9155282dcd9b80a19669ec72001b1ccd504c2b4ad2bfcd600e74ad536

Score
10/10
dridexbotnetloader

Malware Config

Extracted

Family

dridex

C2

138.197.76.168:443

5.133.242.156:170

5.39.91.110:691

85.234.143.94:170

Targets

    • Target

      f24a6b05ff39fb749a39ef9c848f3e9be73807123729879e1cb130464ea193e9

    • Size

      292KB

    • MD5

      d2629536720c268f7f7d262cc3ef94cb

    • SHA1

      121557a26d59e064c9c28bfa062aa8a832950200

    • SHA256

      f24a6b05ff39fb749a39ef9c848f3e9be73807123729879e1cb130464ea193e9

    • SHA512

      23206a1ca33e89b1ed2d103d1666a51a5c72515edacdf25a868cf408d28bba5275e2b7f9155282dcd9b80a19669ec72001b1ccd504c2b4ad2bfcd600e74ad536

    Score
    10/10
    dridexbotnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks