Overview

overview

10

Static

static

3

file3_v3_patched.exe

windows11-ltsc_2024-x64

10

Resubmissions

03/07/2026, 22:01

260703-1xf98agy2w10

03/07/2026, 21:58

260703-1vrm6scy8m10

Sharing

Copy URL Twitter E-mail

General

  • Target
    file3_v3_patched.bin
  • Size 164KB
  • Sample260703-1xf98agy2w
  • SHA256 2c497944eceb52140f6fd5c7d648064a373f62f5174541a1cea38bf4d91c34e4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
dridex22202botnetdefense_evasiondiscoveryloadertrojan

Malware Config

Extracted

Family

  • dridex

Botnet

  • 22202

C2

  • 202.29.60.34:443

  • 66.175.217.172:13786

  • 78.46.78.42:9043

rc4.plain
rc4.plain

Targets

    • Target
      file3_v3_patched.bin
    • Size 164KB
    • SHA256 2c497944eceb52140f6fd5c7d648064a373f62f5174541a1cea38bf4d91c34e4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    botnet22202defense_evasiondiscoverydridexloadertrojan

    • Family: Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader

    • Checks whether UAC is enabled

      defense_evasiontrojan
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks