dridex | db44be3f7cabe29a925594daae36ea68da4c4befde43e563e89af452872cd6d8 | Triage

Sharing

General

Target

db44be3f7cabe29a925594daae36ea68da4c4befde43e563e89af452872cd6d8
Size

144KB
Sample

221130-vw3h6sdb5s
MD5

01918229fcc186a1f44341d644f2c307
SHA1

d233c4775a805e1248947aa44d2cbaab52bdd98b
SHA256

db44be3f7cabe29a925594daae36ea68da4c4befde43e563e89af452872cd6d8
SHA512

5b066bc8c9fc2d24327284b4f0f46879a6d4e8ed5bf2fb0eafa91db1c392f435600674ea7f828ab3807e70bd5e9034354cb7a128d72760092ebd59eee7d49f6d
SSDEEP

1536:QMemdFFGZZwOWdUgos28BVEPRcTzU78XjXRRFyQ+6Iow28NLLlXqxK+PfpF6+oHX:BdOAOVF8wWH2cjBn+063lyKGn6vHdt

Score

10^/10

dridex botnet

Malware Config

Extracted

Family

dridex

C2

104.131.7.40:443

128.199.247.176:1801

69.45.19.145:3889

95.211.148.20:1443

Targets

- Target
  
  db44be3f7cabe29a925594daae36ea68da4c4befde43e563e89af452872cd6d8
- Size
  
  144KB
- MD5
  
  01918229fcc186a1f44341d644f2c307
- SHA1
  
  d233c4775a805e1248947aa44d2cbaab52bdd98b
- SHA256
  
  db44be3f7cabe29a925594daae36ea68da4c4befde43e563e89af452872cd6d8
- SHA512
  
  5b066bc8c9fc2d24327284b4f0f46879a6d4e8ed5bf2fb0eafa91db1c392f435600674ea7f828ab3807e70bd5e9034354cb7a128d72760092ebd59eee7d49f6d
- SSDEEP
  
  1536:QMemdFFGZZwOWdUgos28BVEPRcTzU78XjXRRFyQ+6Iow28NLLlXqxK+PfpF6+oHX:BdOAOVF8wWH2cjBn+063lyKGn6vHdt
Score

10^/10

dridex botnet
- Dridex
  Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
  botnet dridex
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2