Overview

overview

10

Static

static

3

13c5b33339...67.exe

windows7-x64

10

13c5b33339...67.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    01cc1a6632e3291d762d375ed1ddfed923f26aa79d44164b6f05911b944e3921
  • Size 131KB
  • Sample240417-plashsef67
  • SHA256 01cc1a6632e3291d762d375ed1ddfed923f26aa79d44164b6f05911b944e3921
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
dridexbotnetevasiontrojan

Malware Config

Extracted

Family

  • dridex

C2

  • 107.191.111.143:443

  • 91.235.129.113:443

  • 185.16.41.224:443

Targets

    • Target
      13c5b33339522f8f96d091708e7a8a64b0939daa6225732352fbe44cb2950e67.exe
    • Size 228KB
    • SHA256 13c5b33339522f8f96d091708e7a8a64b0939daa6225732352fbe44cb2950e67
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    dridexbotnetevasiontrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Deletes itself

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks