e61cd137b79b66476e496eedb0f9f45f36e94855f3f014e09bb5ff7cc5c23830

General
Target

e61cd137b79b66476e496eedb0f9f45f36e94855f3f014e09bb5ff7cc5c23830

Size

174KB

Sample

210611-5b231hgpcs

Score
10 /10
MD5

5ec5f8c6510ebdb5e657ba2257ba1019

SHA1

72be60edb83780e3ea0861d393592adc5f7c04d0

SHA256

e61cd137b79b66476e496eedb0f9f45f36e94855f3f014e09bb5ff7cc5c23830

SHA512

2f703461f734f53009167783713b64dc95055b7649ae83e57818e0bb1765771351d4fffd28898768d41aed34302f11ac70bd6c9d8d49b303408788a3189abb9a

Malware Config

Extracted

Family dridex
Botnet 22201
C2

178.128.220.64:30333

45.79.91.89:9987

rc4.plain
rc4.plain
Targets
Target

e61cd137b79b66476e496eedb0f9f45f36e94855f3f014e09bb5ff7cc5c23830

MD5

5ec5f8c6510ebdb5e657ba2257ba1019

Filesize

174KB

Score
10 /10
SHA1

72be60edb83780e3ea0861d393592adc5f7c04d0

SHA256

e61cd137b79b66476e496eedb0f9f45f36e94855f3f014e09bb5ff7cc5c23830

SHA512

2f703461f734f53009167783713b64dc95055b7649ae83e57818e0bb1765771351d4fffd28898768d41aed34302f11ac70bd6c9d8d49b303408788a3189abb9a

Tags

Signatures

  • Dridex

    Description

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    Tags

  • Dridex Loader

    Description

    Detects Dridex both x86 and x64 loader in memory.

    Tags

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks

                          static1

                          behavioral1

                          10/10