Overview

overview

10

Static

static

3

670cd33e66...ea.exe

windows7-x64

10

670cd33e66...ea.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    670cd33e664e7ad58c6fb28f40c7e10416a05dc5069726f896c882895dafaaea

  • Size

    358KB

  • Sample

    250113-bee7rsxraz

  • MD5

    337286f6d5ca0c0275fc99a364d13188

  • SHA1

    fdc8b8eed15c6894b3e41f874f64a79c3cee1be5

  • SHA256

    670cd33e664e7ad58c6fb28f40c7e10416a05dc5069726f896c882895dafaaea

  • SHA512

    a5ec5f47cde3c56529c02714a6428493c2b1df2f57c79d25a6e49aa2be40f7c4ba627226161da15f58d2116d717196cef3f6494804b324782348137d05d08bbb

  • SSDEEP

    6144:ptGiJVkbqkwDrooNz3+hBkqYB0Mv/KHFLC2FfeQ7qF1FrVOVb/mtGiJ3tGiJ8Xdr:GA+HwAkzkmRB0iKtC2FcF1fOVbVAUAg1

Score
10/10
dridex10111botnetdiscovery

Malware Config

Extracted

Family

dridex

Botnet

10111

C2

5.9.178.143:443

2.58.16.89:8443

37.139.2.140:3889

217.160.78.166:4664
rc4.plain
rc4.plain

Targets

    • Target

      670cd33e664e7ad58c6fb28f40c7e10416a05dc5069726f896c882895dafaaea

    • Size

      358KB

    • MD5

      337286f6d5ca0c0275fc99a364d13188

    • SHA1

      fdc8b8eed15c6894b3e41f874f64a79c3cee1be5

    • SHA256

      670cd33e664e7ad58c6fb28f40c7e10416a05dc5069726f896c882895dafaaea

    • SHA512

      a5ec5f47cde3c56529c02714a6428493c2b1df2f57c79d25a6e49aa2be40f7c4ba627226161da15f58d2116d717196cef3f6494804b324782348137d05d08bbb

    • SSDEEP

      6144:ptGiJVkbqkwDrooNz3+hBkqYB0Mv/KHFLC2FfeQ7qF1FrVOVb/mtGiJ3tGiJ8Xdr:GA+HwAkzkmRB0iKtC2FcF1fOVbVAUAg1

    Score
    10/10
    dridex10111botnetdiscovery

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex family

      dridex
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks