dridex

General

Target

0e710ce888e4454c7c877a6ca02fade0N.exe
Size

188KB
Sample

240902-jhflpswfpg
MD5

0e710ce888e4454c7c877a6ca02fade0
SHA1

0dca090e2c1204111315711c185e3c6b2af78fd3
SHA256

378c777cae0b1f478e0f3e7591acab252790a029acfa2050c09cca07edee1575
SHA512

cb67141607512db0f82117401a876a8982825d2de93b441fce9005e8ba1e091e153d965e8fcd2846e7e2cb3a0411e8fed4c4a8ebe81da3742cf74ecb98c0ba1e
SSDEEP

3072:6A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAouo:6zIqATVfQeV2FZalKq6jtGJWuTmd

Score

10^/10

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain

1
KyrwRFvnPSJz1K6RG9FGBnfutYq4Kbv0AqNO1y41Jw

rc4.plain

1
aF35v54BafRSuy5kKzAyL5d7iE2gSrPPvsMOuf22FPl0HHQhMRlw8iMYOHxIDusi

Targets

- Target
  
  0e710ce888e4454c7c877a6ca02fade0N.exe
- Size
  
  188KB
- MD5
  
  0e710ce888e4454c7c877a6ca02fade0
- SHA1
  
  0dca090e2c1204111315711c185e3c6b2af78fd3
- SHA256
  
  378c777cae0b1f478e0f3e7591acab252790a029acfa2050c09cca07edee1575
- SHA512
  
  cb67141607512db0f82117401a876a8982825d2de93b441fce9005e8ba1e091e153d965e8fcd2846e7e2cb3a0411e8fed4c4a8ebe81da3742cf74ecb98c0ba1e
- SSDEEP
  
  3072:6A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAouo:6zIqATVfQeV2FZalKq6jtGJWuTmd
Score

10^/10

dridex 22201 botnet discovery loader
- Dridex
  Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
  botnet dridex
- Dridex Loader
  Detects Dridex both x86 and x64 loader in memory.
  botnet loader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Dridex Loader

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

We care about your privacy.