dridex | 54d3f0b7b83cdd412e4889dd2fa07749e8cf01ce0b37a3a40f0fcde7b4a49814 | Triage

Sharing

General

Target

54d3f0b7b83cdd412e4889dd2fa07749e8cf01ce0b37a3a40f0fcde7b4a49814
Size

204KB
Sample

220725-wgwmradcdk
MD5

8630f70dc082c55cefe83f2302df6f50
SHA1

2b0a69f7a71a297f4277d63e9b0d17d02b26395a
SHA256

54d3f0b7b83cdd412e4889dd2fa07749e8cf01ce0b37a3a40f0fcde7b4a49814
SHA512

ab8ed508633ea39d45063b598032168ee9a65015083d6b4c8c4d9d91db987b79f616bae3c84a392cf20def21f7be3b5d6f41883b61b78901ce6fd204f3b9cd1a

Score

10^/10

dridex botnet

Malware Config

Extracted

Family

dridex

C2

5.196.15.119:443

46.105.131.72:443

157.7.163.144:3389

199.119.78.9:4143

Targets

- Target
  
  54d3f0b7b83cdd412e4889dd2fa07749e8cf01ce0b37a3a40f0fcde7b4a49814
- Size
  
  204KB
- MD5
  
  8630f70dc082c55cefe83f2302df6f50
- SHA1
  
  2b0a69f7a71a297f4277d63e9b0d17d02b26395a
- SHA256
  
  54d3f0b7b83cdd412e4889dd2fa07749e8cf01ce0b37a3a40f0fcde7b4a49814
- SHA512
  
  ab8ed508633ea39d45063b598032168ee9a65015083d6b4c8c4d9d91db987b79f616bae3c84a392cf20def21f7be3b5d6f41883b61b78901ce6fd204f3b9cd1a
Score

10^/10

dridex botnet
- Dridex
  Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
  botnet dridex
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2