General

  • Target

    8f5746f816173991ffdab4db119462826fd891d520584433e2c3fefaee6e5c3d

  • Size

    174KB

  • Sample

    210610-xsd2bl5l46

  • MD5

    03721a77b6fc1d740ef53372849215d1

  • SHA1

    8f7f9311d8109bb8a9f39b9ce00c7d532a1fbf27

  • SHA256

    8f5746f816173991ffdab4db119462826fd891d520584433e2c3fefaee6e5c3d

  • SHA512

    441e475227a426800a4a96c36fbf74f6192b57a1e0447397a32474300da5ec6d9ed8afcef88cf79c12e0c85fc5f5daf8da45fb809bad7754f1ade8c284b6bc0e

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987

rc4.plain
rc4.plain

Targets

    • Target

      8f5746f816173991ffdab4db119462826fd891d520584433e2c3fefaee6e5c3d

    • Size

      174KB

    • MD5

      03721a77b6fc1d740ef53372849215d1

    • SHA1

      8f7f9311d8109bb8a9f39b9ce00c7d532a1fbf27

    • SHA256

      8f5746f816173991ffdab4db119462826fd891d520584433e2c3fefaee6e5c3d

    • SHA512

      441e475227a426800a4a96c36fbf74f6192b57a1e0447397a32474300da5ec6d9ed8afcef88cf79c12e0c85fc5f5daf8da45fb809bad7754f1ade8c284b6bc0e

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks