General

  • Target

    bdf2267599c0025c6804d9acf3c09003afae4427a72e35f9b47534affcdb5f27

  • Size

    174KB

  • Sample

    210611-bcdwzm8k5s

  • MD5

    034f0b25df5655e712f7197aa217fe03

  • SHA1

    c503ad08328efeafa4d450c7398c10ec842885fb

  • SHA256

    bdf2267599c0025c6804d9acf3c09003afae4427a72e35f9b47534affcdb5f27

  • SHA512

    6898e2db5ef02682d29957d65bee4e6cbe509a233779c064cfb03b294467bcbb4f5671584ee6f53d52042a8d5d5dc05fec948d45593a7c25062268f8dc442f1e

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987

rc4.plain
rc4.plain

Targets

    • Target

      bdf2267599c0025c6804d9acf3c09003afae4427a72e35f9b47534affcdb5f27

    • Size

      174KB

    • MD5

      034f0b25df5655e712f7197aa217fe03

    • SHA1

      c503ad08328efeafa4d450c7398c10ec842885fb

    • SHA256

      bdf2267599c0025c6804d9acf3c09003afae4427a72e35f9b47534affcdb5f27

    • SHA512

      6898e2db5ef02682d29957d65bee4e6cbe509a233779c064cfb03b294467bcbb4f5671584ee6f53d52042a8d5d5dc05fec948d45593a7c25062268f8dc442f1e

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks