General

  • Target

    1a1f15119164d78186eecb1265277544c2c12d1010d976bc826b51846b2c3c1f

  • Size

    174KB

  • Sample

    210611-bs4xqxbyga

  • MD5

    e181d0d95976653deb930fc1de0347e3

  • SHA1

    8fb9d94ad3381d9b0c24087f659a7ca6d6401a15

  • SHA256

    1a1f15119164d78186eecb1265277544c2c12d1010d976bc826b51846b2c3c1f

  • SHA512

    bd85d1615b2750ef56449719f8d2fdf906bce7f5b4d2db61262267da2dbcea2722dd1c1b8333523670802c27605f46ef8d51ce565e1d0f50ce30d611f0ff760a

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987

rc4.plain
rc4.plain

Targets

    • Target

      1a1f15119164d78186eecb1265277544c2c12d1010d976bc826b51846b2c3c1f

    • Size

      174KB

    • MD5

      e181d0d95976653deb930fc1de0347e3

    • SHA1

      8fb9d94ad3381d9b0c24087f659a7ca6d6401a15

    • SHA256

      1a1f15119164d78186eecb1265277544c2c12d1010d976bc826b51846b2c3c1f

    • SHA512

      bd85d1615b2750ef56449719f8d2fdf906bce7f5b4d2db61262267da2dbcea2722dd1c1b8333523670802c27605f46ef8d51ce565e1d0f50ce30d611f0ff760a

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks