MITRE ATT&CKsoftware (malware)

S0384 Dridex

Published 2019-05-30 Modified 2025-04-16 Official page ↗
Domain
enterprise
Platforms
Windows
Aliases
Bugat v5
Version
2.1
Created
2019-05-30

Description

Dridex is a prolific banking Trojan that first appeared in 2014. By December 2019, the US Treasury estimated Dridex had infected computers in hundreds of banks and financial institutions in over 40 countries, leading to more than $100 million in theft. Dridex was created from the source code of the Bugat banking Trojan (also known as Cridex).

Related

Uses · MITRE ATT&CK (15)

  • T1573.001 Symmetric Cryptography sub-technique
  • T1573.002 Asymmetric Cryptography sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1090.003 Multi-hop Proxy sub-technique
  • T1574.001 DLL sub-technique
  • T1204.002 Malicious File sub-technique
  • T1218.010 Regsvr32 sub-technique
  • T1053.005 Scheduled Task sub-technique
  • T1518 Software Discovery technique
  • T1219 Remote Access Tools technique
  • T1185 Browser Session Hijacking technique
  • T1027 Obfuscated Files or Information technique
  • T1082 System Information Discovery technique
  • T1090 Proxy technique
  • T1106 Native API technique

Referenced by MITRE ATT&CK · uses (2)

References