General

  • Target

    DRIDEX (6)

  • Size

    320KB

  • Sample

    200924-wfe8bfpfcx

  • MD5

    4b7a60d7db351a62304d9659b7e39f57

  • SHA1

    1f8b09ad1ff3fce962fac3fa2aebca346eb7d7a6

  • SHA256

    92794ce2b86f5636b0636952f7ac4b02f0fd664b5f479372d64aa779d376a7a2

  • SHA512

    16c68240bc90f9a70f00df8ba74d15dad73cdd30a1cd541a9013340c1f906270d717690a5ce0b8b3dd7c2bf7163d3ffa87283edd310da5f5377d1e332c9bf0fb

Malware Config

Extracted

Family

dridex

Botnet

10444

C2

151.236.219.181:443

142.4.6.57:14043

162.144.127.197:3786

103.40.116.68:5443

rc4.plain
rc4.plain

Targets

    • Target

      DRIDEX (6)

    • Size

      320KB

    • MD5

      4b7a60d7db351a62304d9659b7e39f57

    • SHA1

      1f8b09ad1ff3fce962fac3fa2aebca346eb7d7a6

    • SHA256

      92794ce2b86f5636b0636952f7ac4b02f0fd664b5f479372d64aa779d376a7a2

    • SHA512

      16c68240bc90f9a70f00df8ba74d15dad73cdd30a1cd541a9013340c1f906270d717690a5ce0b8b3dd7c2bf7163d3ffa87283edd310da5f5377d1e332c9bf0fb

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks