S0384 Dridex

malwareEnterprise

platformsWindows

also known asDridex · Bugat v5

Dridex is a prolific banking Trojan that first appeared in 2014. By December 2019, the US Treasury estimated Dridex had infected computers in hundreds of banks and financial institutions in over 40 countries, leading to more than $100 million in theft. Dridex was created from the source code of the Bugat banking Trojan (also known as Cridex).

techniques used (15)

ATT&CK techniques this enables or maps to.

T1027Obfuscated Files or Information
T1053.005Scheduled Task
T1071.001Web Protocols
T1082System Information Discovery
T1090Proxy
T1090.003Multi-hop Proxy
T1106Native API
T1185Browser Session Hijacking
T1204.002Malicious File
T1218.010Regsvr32
T1219Remote Access Tools
T1518Software Discovery
T1573.001Symmetric Cryptography
T1573.002Asymmetric Cryptography
T1574.001DLL

used by groups (2)

Threat groups associated with this.

G0119Indrik Spider
G0092TA505

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan