Dridex

(Botnet) Link to the old Wiki page : [1] / Google search: [2]

Dridex
Alias	Dyre, Dyreza, Dyzap, Dyranges
Group	Banking
Parent	Feodo
Sibling
Family
Relations	Variants: Sibling of: Parent of: Distribution of: Campaigns:
Target
Origin
Distribution vector	Spam, Cutwail, Dropbox, Cubby, Upatre, Gozi Neverquest
UserAgent
CCProtocol	HTTP (Centralized), SSL (), I2P (Decentralized)
Activity	2014 /
Status	Active
Language
Programming language
Operation/Working group

Features

• Banking credential theft

• Man in the browser

• Backconnect server

• Custom C&C encryption algorithm

• Domain generation algorithm

Publications

	Author	Editor	Year
Banking trojan Dridex uses macros for infection	Rhena Inocencio	Trend Micro	2014
Chasing cybercrime: network insights of Dyre and Dridex trojan bankers	Blueliv	Blueliv	2015
Dridex learns new trick: P2P over HTTP	S21sec Ecrime	S21sec	2014