dridex | 8521e047f78ccf64777d40e44fb86a95f900e0ed594bb4f01cc6802ff412c536 | Triage

Sharing

General

Target

se12y5vm.exe
Size

311KB
Sample

230703-n5rdyahf2v
MD5

7750ba949e4b090260827a4d8be63efc
SHA1

ee0e268bfa0e49591dcf77f32d7da94515d03c82
SHA256

8521e047f78ccf64777d40e44fb86a95f900e0ed594bb4f01cc6802ff412c536
SHA512

464c3ac243bb8b3bad6419d10d5c9112dbb658e13256b722325bb42bcb11c464192683cb814568ecb431bf28aa3b58cbd7061f8c273b5ee3ac700948876eb315
SSDEEP

6144:WH9O040SSrnmrwc4oU2FmrEaoGAC+Y5H2V3B918juwN:i9O02Srnh0qEJC+Y218jdN

Score

10^/10

dridex 10444 botnet

Malware Config

Extracted

Family

dridex

Botnet

10444

C2

77.220.64.37:443

80.86.91.27:3308

5.100.228.233:3389

46.105.131.65:1512

rc4.plain

rc4.plain

Targets

- Target
  
  se12y5vm.exe
- Size
  
  311KB
- MD5
  
  7750ba949e4b090260827a4d8be63efc
- SHA1
  
  ee0e268bfa0e49591dcf77f32d7da94515d03c82
- SHA256
  
  8521e047f78ccf64777d40e44fb86a95f900e0ed594bb4f01cc6802ff412c536
- SHA512
  
  464c3ac243bb8b3bad6419d10d5c9112dbb658e13256b722325bb42bcb11c464192683cb814568ecb431bf28aa3b58cbd7061f8c273b5ee3ac700948876eb315
- SSDEEP
  
  6144:WH9O040SSrnmrwc4oU2FmrEaoGAC+Y5H2V3B918juwN:i9O02Srnh0qEJC+Y218jdN
Score

10^/10

dridex 10444 botnet
- Dridex
  Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
  botnet dridex
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

dridex10444botnet