fac37d736d05a4311a2b41877cdf5da53c3a5a4bf1373325ca6db2b72f672b72

General
Target

fac37d736d05a4311a2b41877cdf5da53c3a5a4bf1373325ca6db2b72f672b72

Size

174KB

Sample

210611-3jmv41421n

Score
10 /10
MD5

2c40260cfa90bfe815711b4aec7ed69c

SHA1

f1afe5720fb291fdc4c08d44c4af0ff2159ce980

SHA256

fac37d736d05a4311a2b41877cdf5da53c3a5a4bf1373325ca6db2b72f672b72

SHA512

60eaf1d386b5826f84f13c0cc8971684257bfaba19d13d5870cb87356110cccd7a80db287a44f0f8b3ee125c3df1d0b415c267f7ce15d52ed98eb89a7252d18d

Malware Config

Extracted

Family dridex
Botnet 22201
C2

178.128.220.64:30333

45.79.91.89:9987

rc4.plain
rc4.plain
Targets
Target

fac37d736d05a4311a2b41877cdf5da53c3a5a4bf1373325ca6db2b72f672b72

MD5

2c40260cfa90bfe815711b4aec7ed69c

Filesize

174KB

Score
10 /10
SHA1

f1afe5720fb291fdc4c08d44c4af0ff2159ce980

SHA256

fac37d736d05a4311a2b41877cdf5da53c3a5a4bf1373325ca6db2b72f672b72

SHA512

60eaf1d386b5826f84f13c0cc8971684257bfaba19d13d5870cb87356110cccd7a80db287a44f0f8b3ee125c3df1d0b415c267f7ce15d52ed98eb89a7252d18d

Tags

Signatures

  • Dridex

    Description

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    Tags

  • Dridex Loader

    Description

    Detects Dridex both x86 and x64 loader in memory.

    Tags

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks

                          static1

                          behavioral1

                          10/10