General

  • Target

    599df333fff8458f4c274abdd90407a70e5c1274efa336d74a54ffdb37049c8e

  • Size

    174KB

  • Sample

    210610-21lsv1s9hx

  • MD5

    ac1a1ce7465b0a2b90e518ad0397776e

  • SHA1

    2043b7866b93b56fbe1964267c52ed3b902850c8

  • SHA256

    599df333fff8458f4c274abdd90407a70e5c1274efa336d74a54ffdb37049c8e

  • SHA512

    ff0f745456f7bd6b6818b874504c34c179e5349250957e8bc901e0a1330a93cc8d669eaacef788423465b1e3372cfa7e1e2b4b0fb34584f7d6425dc30fb0b286

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987

rc4.plain
rc4.plain

Targets

    • Target

      599df333fff8458f4c274abdd90407a70e5c1274efa336d74a54ffdb37049c8e

    • Size

      174KB

    • MD5

      ac1a1ce7465b0a2b90e518ad0397776e

    • SHA1

      2043b7866b93b56fbe1964267c52ed3b902850c8

    • SHA256

      599df333fff8458f4c274abdd90407a70e5c1274efa336d74a54ffdb37049c8e

    • SHA512

      ff0f745456f7bd6b6818b874504c34c179e5349250957e8bc901e0a1330a93cc8d669eaacef788423465b1e3372cfa7e1e2b4b0fb34584f7d6425dc30fb0b286

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks