dridex | dc3185e0398231a5b5f6d8d84b736349927b86076be17fe473391fa266b5dde5 | Triage

Sharing

General

Target

dc3185e0398231a5b5f6d8d84b736349927b86076be17fe473391fa266b5dde5
Size

144KB
Sample

221130-tnbj2shd7x
MD5

7c024b0c454727aa67bb320d063a008d
SHA1

e1b95566b3eb0cf7a4f2efd566afd5eded6f8d3f
SHA256

dc3185e0398231a5b5f6d8d84b736349927b86076be17fe473391fa266b5dde5
SHA512

a2cfa1428ca30dcb89517688ebac4621fc2dda421c82111693eb07facef62f515d9c0a6466ed4749f24a9171c43b29d015159a663efdcc19d862117c86f89307
SSDEEP

3072:F7mgUDtD5kBp5DHNmQ9ah/Kn7+CX3Pof4VQf/SrVM33dUu:F7m5kL5DHMQchK73nPO4VQXSpM

Score

10^/10

dridex botnet

Malware Config

Extracted

Family

dridex

C2

104.131.7.40:443

128.199.247.176:1801

69.45.19.145:3889

95.211.148.20:1443

Targets

- Target
  
  dc3185e0398231a5b5f6d8d84b736349927b86076be17fe473391fa266b5dde5
- Size
  
  144KB
- MD5
  
  7c024b0c454727aa67bb320d063a008d
- SHA1
  
  e1b95566b3eb0cf7a4f2efd566afd5eded6f8d3f
- SHA256
  
  dc3185e0398231a5b5f6d8d84b736349927b86076be17fe473391fa266b5dde5
- SHA512
  
  a2cfa1428ca30dcb89517688ebac4621fc2dda421c82111693eb07facef62f515d9c0a6466ed4749f24a9171c43b29d015159a663efdcc19d862117c86f89307
- SSDEEP
  
  3072:F7mgUDtD5kBp5DHNmQ9ah/Kn7+CX3Pof4VQf/SrVM33dUu:F7m5kL5DHMQchK73nPO4VQXSpM
Score

10^/10

dridex botnet
- Dridex
  Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
  botnet dridex
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2