Overview

overview

10

Static

static

553cebfb4f...77.exe

windows7-x64

10

553cebfb4f...77.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    553cebfb4f6aab50390207ec9d0370edad33d7c7ac99d32b12481d4f452ebb77

  • Size

    344KB

  • Sample

    220725-t5g36aaefm

  • MD5

    1eb9fe6bed911288e1e184b838cab440

  • SHA1

    ace940ecdb5f34ac018930ae7e9ff14333c6fbcf

  • SHA256

    553cebfb4f6aab50390207ec9d0370edad33d7c7ac99d32b12481d4f452ebb77

  • SHA512

    6aa7aa4c00b997d6e1a1fc33deb72e596cf62830260feaca628c675464266c62d55b2f4a31596ff3da0b0dafd503bbd7f68a5bf7c9daa63b8e571ed540c78b9f

Score
10/10
dridexbotnetloader

Malware Config

Extracted

Family

dridex

C2

184.106.153.73:443

88.220.65.41:3389

66.228.47.181:443

198.199.106.229:5900

Targets

    • Target

      553cebfb4f6aab50390207ec9d0370edad33d7c7ac99d32b12481d4f452ebb77

    • Size

      344KB

    • MD5

      1eb9fe6bed911288e1e184b838cab440

    • SHA1

      ace940ecdb5f34ac018930ae7e9ff14333c6fbcf

    • SHA256

      553cebfb4f6aab50390207ec9d0370edad33d7c7ac99d32b12481d4f452ebb77

    • SHA512

      6aa7aa4c00b997d6e1a1fc33deb72e596cf62830260feaca628c675464266c62d55b2f4a31596ff3da0b0dafd503bbd7f68a5bf7c9daa63b8e571ed540c78b9f

    Score
    10/10
    dridexbotnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks