0d4b187ac597946a403f6870d9984b473566df4c29f9053ccf124dc3e05dc732

General
Target

0d4b187ac597946a403f6870d9984b473566df4c29f9053ccf124dc3e05dc732

Size

174KB

Sample

210611-bmjnpdn23x

Score
10 /10
MD5

66306b1e141c06a53ba2b285c8153405

SHA1

4d85fcf2bbe9c2726acbe69335ec3c029725cfd1

SHA256

0d4b187ac597946a403f6870d9984b473566df4c29f9053ccf124dc3e05dc732

SHA512

99793258632d75d9b7999208353a72b6b921a2bc0fbc34f88e9e95432485faedbe2a6526b571f21633b175e22861c41a1596a684e2ecd694a21cc78c09aa8150

Malware Config

Extracted

Family dridex
Botnet 22201
C2

178.128.220.64:30333

45.79.91.89:9987

rc4.plain
rc4.plain
Targets
Target

0d4b187ac597946a403f6870d9984b473566df4c29f9053ccf124dc3e05dc732

MD5

66306b1e141c06a53ba2b285c8153405

Filesize

174KB

Score
10 /10
SHA1

4d85fcf2bbe9c2726acbe69335ec3c029725cfd1

SHA256

0d4b187ac597946a403f6870d9984b473566df4c29f9053ccf124dc3e05dc732

SHA512

99793258632d75d9b7999208353a72b6b921a2bc0fbc34f88e9e95432485faedbe2a6526b571f21633b175e22861c41a1596a684e2ecd694a21cc78c09aa8150

Tags

Signatures

  • Dridex

    Description

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    Tags

  • Dridex Loader

    Description

    Detects Dridex both x86 and x64 loader in memory.

    Tags

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks

                          static1

                          behavioral1

                          10/10