General

  • Target

    DRIDEX

  • Size

    320KB

  • Sample

    200924-c9x67vtf3s

  • MD5

    871c3af229204f1b42629653571536df

  • SHA1

    5e05260708897ac30bba409f234dd157044ab7dd

  • SHA256

    1f8dc085e250847f7a31d7785710be49b17eed1e1c6e460478e2e5232bda689a

  • SHA512

    e1036a37f761c2815046c5d7f021bae2f877c9202337449f2d52c07d9eed05e021f4d31b072542dde9b4dac0bed8a1499ce7891546e90812c0d2ec67f04f0af0

Malware Config

Extracted

Family

dridex

Botnet

10444

C2

151.236.219.181:443

142.4.6.57:14043

162.144.127.197:3786

103.40.116.68:5443

rc4.plain
rc4.plain

Targets

    • Target

      DRIDEX

    • Size

      320KB

    • MD5

      871c3af229204f1b42629653571536df

    • SHA1

      5e05260708897ac30bba409f234dd157044ab7dd

    • SHA256

      1f8dc085e250847f7a31d7785710be49b17eed1e1c6e460478e2e5232bda689a

    • SHA512

      e1036a37f761c2815046c5d7f021bae2f877c9202337449f2d52c07d9eed05e021f4d31b072542dde9b4dac0bed8a1499ce7891546e90812c0d2ec67f04f0af0

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks