Overview

overview

10

Static

static

1

f8a59fa791...94.exe

windows7-x64

10

f8a59fa791...94.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f8a59fa79158e36f51038469ab4a67e6be2e79c903383e34a8fb454277e07f94.exe

  • Size

    676KB

  • Sample

    250119-vm8zlaxqbj

  • MD5

    77ac3150c0a2ea85af89954b900a5198

  • SHA1

    bc22fa4303f9faba46eea3d5abbf7329f910f6a6

  • SHA256

    f8a59fa79158e36f51038469ab4a67e6be2e79c903383e34a8fb454277e07f94

  • SHA512

    802d1016f53fb4ab3bd2c9b5f6012579e75aee64063ced07484428d47f64872f05ef36c99429a9bfec2160a56b3494f380477a356e2d714fbabdc98b43d04e11

  • SSDEEP

    12288:YHcRey4pHcRey4pHcRey4+Z2E6lbYvjha5snTOuC3:YCqCqCLZf6lK2GTOn3

Score
10/10
dridex10111botnetdiscovery

Malware Config

Extracted

Family

dridex

Botnet

10111

C2

185.89.158.19:443

144.217.7.207:4443

59.10.131.141:34443
rc4.plain
rc4.plain

Targets

    • Target

      f8a59fa79158e36f51038469ab4a67e6be2e79c903383e34a8fb454277e07f94.exe

    • Size

      676KB

    • MD5

      77ac3150c0a2ea85af89954b900a5198

    • SHA1

      bc22fa4303f9faba46eea3d5abbf7329f910f6a6

    • SHA256

      f8a59fa79158e36f51038469ab4a67e6be2e79c903383e34a8fb454277e07f94

    • SHA512

      802d1016f53fb4ab3bd2c9b5f6012579e75aee64063ced07484428d47f64872f05ef36c99429a9bfec2160a56b3494f380477a356e2d714fbabdc98b43d04e11

    • SSDEEP

      12288:YHcRey4pHcRey4pHcRey4+Z2E6lbYvjha5snTOuC3:YCqCqCLZf6lK2GTOn3

    Score
    10/10
    dridex10111botnetdiscovery

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex family

      dridex
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks