General

  • Target

    9dd190446023142ac53e4dbe891e7b8f612b3708c911cfe01aa09f0c3119ba6c

  • Size

    174KB

  • Sample

    210611-69hzq76b4x

  • MD5

    39584055de3809d4863023f33c4430ba

  • SHA1

    93ac2e0c02ecc79e271da78ae442720aa0d977f6

  • SHA256

    9dd190446023142ac53e4dbe891e7b8f612b3708c911cfe01aa09f0c3119ba6c

  • SHA512

    d219067528407bcff53b1f8fad8ac122da256b9767805e3b610056de908c51235bdeb8522a30c36412ba3f989718a55b278247d6dd8629ef2087781be8128f5f

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987

rc4.plain
rc4.plain

Targets

    • Target

      9dd190446023142ac53e4dbe891e7b8f612b3708c911cfe01aa09f0c3119ba6c

    • Size

      174KB

    • MD5

      39584055de3809d4863023f33c4430ba

    • SHA1

      93ac2e0c02ecc79e271da78ae442720aa0d977f6

    • SHA256

      9dd190446023142ac53e4dbe891e7b8f612b3708c911cfe01aa09f0c3119ba6c

    • SHA512

      d219067528407bcff53b1f8fad8ac122da256b9767805e3b610056de908c51235bdeb8522a30c36412ba3f989718a55b278247d6dd8629ef2087781be8128f5f

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks