477d7ca215d132acfab8058d1218662b172cdcaa951d9f543839b774456625d8

General
Target

477d7ca215d132acfab8058d1218662b172cdcaa951d9f543839b774456625d8

Size

170KB

Sample

210611-8yvaqzpaj2

Score
10 /10
MD5

42f87dc159baceb3496e5be5d0c5aa12

SHA1

5a063b690b26667d7b6c2f9609cd972585a28712

SHA256

477d7ca215d132acfab8058d1218662b172cdcaa951d9f543839b774456625d8

SHA512

43ac30119999a24be09525f0be5f890acf4ca38e970fe895d75557a6d5e2af437b6023d7b752df210d2065d53c5d40a25a7a5d281cc8a2695cbc589360d5aa56

Malware Config

Extracted

Family dridex
Botnet 40112
C2

128.199.200.38:443

192.163.233.216:6601

43.229.206.244:4125

rc4.plain
rc4.plain
Targets
Target

477d7ca215d132acfab8058d1218662b172cdcaa951d9f543839b774456625d8

MD5

42f87dc159baceb3496e5be5d0c5aa12

Filesize

170KB

Score
10 /10
SHA1

5a063b690b26667d7b6c2f9609cd972585a28712

SHA256

477d7ca215d132acfab8058d1218662b172cdcaa951d9f543839b774456625d8

SHA512

43ac30119999a24be09525f0be5f890acf4ca38e970fe895d75557a6d5e2af437b6023d7b752df210d2065d53c5d40a25a7a5d281cc8a2695cbc589360d5aa56

Tags

Signatures

  • Dridex

    Description

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    Tags

  • Dridex Loader

    Description

    Detects Dridex both x86 and x64 loader in memory.

    Tags

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks

                          static1

                          behavioral1

                          10/10