General

  • Target

    74a6f0d07e68b90a99f69e000e031be07b7db6f8fe309769f1400717bd825729

  • Size

    174KB

  • Sample

    210611-8dn275dvyn

  • MD5

    04a452ea84494a653abbf12bbaca8f9b

  • SHA1

    c5231f38fa32d722689f245d9aa8ede319d2e8b0

  • SHA256

    74a6f0d07e68b90a99f69e000e031be07b7db6f8fe309769f1400717bd825729

  • SHA512

    50eb13c01cedb59cda4eab8172b47e4633be468e5585631af47f93aba449ca5768a1c3ffc635ed3dc2f2c559dfc9f738f1eaa4f71ba924ec70aaf8c69a1fc31b

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987

rc4.plain
rc4.plain

Targets

    • Target

      74a6f0d07e68b90a99f69e000e031be07b7db6f8fe309769f1400717bd825729

    • Size

      174KB

    • MD5

      04a452ea84494a653abbf12bbaca8f9b

    • SHA1

      c5231f38fa32d722689f245d9aa8ede319d2e8b0

    • SHA256

      74a6f0d07e68b90a99f69e000e031be07b7db6f8fe309769f1400717bd825729

    • SHA512

      50eb13c01cedb59cda4eab8172b47e4633be468e5585631af47f93aba449ca5768a1c3ffc635ed3dc2f2c559dfc9f738f1eaa4f71ba924ec70aaf8c69a1fc31b

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks