General

  • Target

    SecuriteInfo.com.Generic.mg.a044b05b562df10c.24500

  • Size

    836KB

  • Sample

    210121-76cwxmz83j

  • MD5

    a044b05b562df10c84f801613a67a8db

  • SHA1

    778e906286b670d5c65f409a19c22551c7cf638f

  • SHA256

    f02daa7dc041b9166371cc8f76de01f90bb3bee82ee8236fc9a113eb7a80f878

  • SHA512

    e262b412ac01c75ea1ca0df9c5af9a19d1103cb7ae0ddd4d514a7a28d05a3c6d3a00e576a9d0e4b816b8f79f8f1fabd6cede7f6ac9bc580114e939190eadb3c8

Malware Config

Extracted

Family

dridex

Botnet

10444

C2

194.225.58.214:443

211.110.44.63:5353

69.164.207.140:3388

198.57.200.100:3786

rc4.plain
rc4.plain

Targets

    • Target

      SecuriteInfo.com.Generic.mg.a044b05b562df10c.24500

    • Size

      836KB

    • MD5

      a044b05b562df10c84f801613a67a8db

    • SHA1

      778e906286b670d5c65f409a19c22551c7cf638f

    • SHA256

      f02daa7dc041b9166371cc8f76de01f90bb3bee82ee8236fc9a113eb7a80f878

    • SHA512

      e262b412ac01c75ea1ca0df9c5af9a19d1103cb7ae0ddd4d514a7a28d05a3c6d3a00e576a9d0e4b816b8f79f8f1fabd6cede7f6ac9bc580114e939190eadb3c8

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks