General

  • Target

    777d4b786012bd8447013a811e423b5c9656f054780795d9ef670a438065db2f

  • Size

    172KB

  • Sample

    210610-y5bkh3zcq2

  • MD5

    1b0dc0a87db2fc0b2fa1aca50f22be76

  • SHA1

    421e46091b51a0f9e3242cace4e2f384c664b8db

  • SHA256

    777d4b786012bd8447013a811e423b5c9656f054780795d9ef670a438065db2f

  • SHA512

    2325b8adffcf564c2a104d91876ed40e71c599575f73fcd156da4c8ea70c974cd3b5d7ccbcd44e9addfeec3897009f30ccc20afca6d606c1860f4a1b0dc7728e

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

210.65.244.187:443

162.241.41.92:2303

46.231.204.10:8172

185.183.159.100:4125

rc4.plain
rc4.plain

Targets

    • Target

      777d4b786012bd8447013a811e423b5c9656f054780795d9ef670a438065db2f

    • Size

      172KB

    • MD5

      1b0dc0a87db2fc0b2fa1aca50f22be76

    • SHA1

      421e46091b51a0f9e3242cace4e2f384c664b8db

    • SHA256

      777d4b786012bd8447013a811e423b5c9656f054780795d9ef670a438065db2f

    • SHA512

      2325b8adffcf564c2a104d91876ed40e71c599575f73fcd156da4c8ea70c974cd3b5d7ccbcd44e9addfeec3897009f30ccc20afca6d606c1860f4a1b0dc7728e

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks