dridex | dca1aab960f20d310d80f2b4fe43b19e4b9113499cfcf190235fa0669714357a | Triage

Sharing

General

Target

dca1aab960f20d310d80f2b4fe43b19e4b9113499cfcf190235fa0669714357a
Size

148KB
Sample

221130-xs9jesfg52
MD5

77bfd945823e92de9db82a86ff901dfd
SHA1

c7e860e38afab93ed4d8c68f425eab8dce178729
SHA256

dca1aab960f20d310d80f2b4fe43b19e4b9113499cfcf190235fa0669714357a
SHA512

aaaf37c625f3308f602445286953d853135e4fef10e30a0f6b6562b8e4294be4c891ae292a5eb5da1d3ea46e10e55f6f2e5ec2ec7c5b8c0f5c11a754ed5b8e25
SSDEEP

3072:RhkKYt72eBKpZtQyxqC3zYLzyKyh7SDVuZXsbcdtZ6xTjMdlhxvmdt:RhfYweGZtRxJY/ShWZuZEcHxX

Score

10^/10

dridex botnet

Malware Config

Extracted

Family

dridex

C2

104.131.7.40:443

128.199.247.176:1801

69.45.19.145:3889

95.211.148.20:1443

Targets

- Target
  
  dca1aab960f20d310d80f2b4fe43b19e4b9113499cfcf190235fa0669714357a
- Size
  
  148KB
- MD5
  
  77bfd945823e92de9db82a86ff901dfd
- SHA1
  
  c7e860e38afab93ed4d8c68f425eab8dce178729
- SHA256
  
  dca1aab960f20d310d80f2b4fe43b19e4b9113499cfcf190235fa0669714357a
- SHA512
  
  aaaf37c625f3308f602445286953d853135e4fef10e30a0f6b6562b8e4294be4c891ae292a5eb5da1d3ea46e10e55f6f2e5ec2ec7c5b8c0f5c11a754ed5b8e25
- SSDEEP
  
  3072:RhkKYt72eBKpZtQyxqC3zYLzyKyh7SDVuZXsbcdtZ6xTjMdlhxvmdt:RhfYweGZtRxJY/ShWZuZEcHxX
Score

10^/10

dridex botnet
- Dridex
  Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
  botnet dridex
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2