General

  • Target

    3b7954976c70e78a7be2e9d5e8a8c63097e293bf24b720c9809653011d26ee1b

  • Size

    174KB

  • Sample

    210610-n46b81bts2

  • MD5

    d402f80162ab024c07cdc1ef39d3dc2c

  • SHA1

    3373476cfe58879b46b09102f0f98bada9ef3c7f

  • SHA256

    3b7954976c70e78a7be2e9d5e8a8c63097e293bf24b720c9809653011d26ee1b

  • SHA512

    e9cc115da7474d2e93ca6b00b819998c5a0a9d3bd1d948cf531fae3365c40be65e4cd66fc6f1ca4b4bc2646b077cb6e027e0d14b46a2cf2a04021dbb7978b3f8

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987

rc4.plain
rc4.plain

Targets

    • Target

      3b7954976c70e78a7be2e9d5e8a8c63097e293bf24b720c9809653011d26ee1b

    • Size

      174KB

    • MD5

      d402f80162ab024c07cdc1ef39d3dc2c

    • SHA1

      3373476cfe58879b46b09102f0f98bada9ef3c7f

    • SHA256

      3b7954976c70e78a7be2e9d5e8a8c63097e293bf24b720c9809653011d26ee1b

    • SHA512

      e9cc115da7474d2e93ca6b00b819998c5a0a9d3bd1d948cf531fae3365c40be65e4cd66fc6f1ca4b4bc2646b077cb6e027e0d14b46a2cf2a04021dbb7978b3f8

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks