General

  • Target

    SecuriteInfo.com.Trojan.Dridex.735.23113.10047

  • Size

    848KB

  • Sample

    210121-kfnsavl7es

  • MD5

    20d8e40ed61bc393b284a7878eedf547

  • SHA1

    594d882a0cf7a0d556a3de20a888940609f9a591

  • SHA256

    3dea2ad1ccddada30495697ab1bd7eef2f56e3a680757a93afec9b531888cd25

  • SHA512

    dcdb623c1c9cadd01a2dcdd39d6e9a7aeadbcc58a79e0c758f3fd2421e13dfcab6546101f8056a9c69f12cace259d55e1064a536d4efe50e9155a42c9c0ec77a

Malware Config

Extracted

Family

dridex

Botnet

10444

C2

194.225.58.214:443

211.110.44.63:5353

69.164.207.140:3388

198.57.200.100:3786

rc4.plain
rc4.plain

Targets

    • Target

      SecuriteInfo.com.Trojan.Dridex.735.23113.10047

    • Size

      848KB

    • MD5

      20d8e40ed61bc393b284a7878eedf547

    • SHA1

      594d882a0cf7a0d556a3de20a888940609f9a591

    • SHA256

      3dea2ad1ccddada30495697ab1bd7eef2f56e3a680757a93afec9b531888cd25

    • SHA512

      dcdb623c1c9cadd01a2dcdd39d6e9a7aeadbcc58a79e0c758f3fd2421e13dfcab6546101f8056a9c69f12cace259d55e1064a536d4efe50e9155a42c9c0ec77a

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks