General

  • Target

    be82a2b25362e2ad038abc1d482d27016833a131cbd6df2f857456476ca2c718

  • Size

    174KB

  • Sample

    210611-2wvhzm64an

  • MD5

    4e6ee37d4b2ff38dbc019c00bfe56d87

  • SHA1

    c8b6d74425c0941aff435cc7dcb0ea6d221479c1

  • SHA256

    be82a2b25362e2ad038abc1d482d27016833a131cbd6df2f857456476ca2c718

  • SHA512

    85463d4c4a9ce11bdca13a99158c41a8cfdcb26e35a8ed7054ff9c25119f114b6f887952eb4ed460503c569c65958998fe51bf3bbe6989a1adb0cd38033042ae

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987

rc4.plain
rc4.plain

Targets

    • Target

      be82a2b25362e2ad038abc1d482d27016833a131cbd6df2f857456476ca2c718

    • Size

      174KB

    • MD5

      4e6ee37d4b2ff38dbc019c00bfe56d87

    • SHA1

      c8b6d74425c0941aff435cc7dcb0ea6d221479c1

    • SHA256

      be82a2b25362e2ad038abc1d482d27016833a131cbd6df2f857456476ca2c718

    • SHA512

      85463d4c4a9ce11bdca13a99158c41a8cfdcb26e35a8ed7054ff9c25119f114b6f887952eb4ed460503c569c65958998fe51bf3bbe6989a1adb0cd38033042ae

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks