dridex | 913b3a1f7373183062faff30e346f317bdf492508a1aa4d4fcb8dd1bf7e078d8 | Triage

Sharing

General

Target

73e7b693263021c2c5636417ee501e70N.exe
Size

184KB
Sample

240815-dacl7a1bjb
MD5

73e7b693263021c2c5636417ee501e70
SHA1

3cb31bd9e11e9a31509d7fd16e5c6c7f5ea38e3f
SHA256

913b3a1f7373183062faff30e346f317bdf492508a1aa4d4fcb8dd1bf7e078d8
SHA512

a3ed57f17965ecd2becbeeba65f277197217a621b3be99fcf6e644c064947a0c64065c98c7c6b3534882c8fdd4bdbeba4b0fb535bff01bd048795d84b16495a7
SSDEEP

3072:NgkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdgPdA4l:cPFkq6zOe5ilSanOYd

Score

10^/10

dridex 22201 botnet discovery loader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664

rc4.plain

rc4.plain

Targets

- Target
  
  73e7b693263021c2c5636417ee501e70N.exe
- Size
  
  184KB
- MD5
  
  73e7b693263021c2c5636417ee501e70
- SHA1
  
  3cb31bd9e11e9a31509d7fd16e5c6c7f5ea38e3f
- SHA256
  
  913b3a1f7373183062faff30e346f317bdf492508a1aa4d4fcb8dd1bf7e078d8
- SHA512
  
  a3ed57f17965ecd2becbeeba65f277197217a621b3be99fcf6e644c064947a0c64065c98c7c6b3534882c8fdd4bdbeba4b0fb535bff01bd048795d84b16495a7
- SSDEEP
  
  3072:NgkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdgPdA4l:cPFkq6zOe5ilSanOYd
Score

10^/10

dridex 22201 botnet discovery loader
- Dridex
  Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
  botnet dridex
- Dridex Loader
  Detects Dridex both x86 and x64 loader in memory.
  botnet loader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

dridex22201botnetdiscoveryloader

behavioral2

dridex22201botnetdiscoveryloader