Dridex
- ID
- S0384
- Type
- Malware
- Associated names
- Bugat v5
- Platforms
- Windows
- Source
- attack.mitre.org
- MITRE last modified
- 17 Apr 2025
Dridex is a prolific banking Trojan that first appeared in 2014. By December 2019, the US Treasury estimated Dridex had infected computers in hundreds of banks and financial institutions in over 40 countries, leading to more than $100 million in theft. Dridex was created from the source code of the Bugat banking Trojan (also known as Cridex).[1][2][3]
Techniques used (15)
- T1027 Obfuscated Files or Information
- T1053.005 Scheduled Task
- T1071.001 Web Protocols
- T1082 System Information Discovery
- T1090 Proxy
- T1090.003 Multi-hop Proxy
- T1106 Native API
- T1185 Browser Session Hijacking
- T1204.002 Malicious File
- T1218.010 Regsvr32
- T1219 Remote Access Tools
- T1518 Software Discovery
- T1573.001 Symmetric Cryptography
- T1573.002 Asymmetric Cryptography
- T1574.001 DLL