General

  • Target

    1cfa578898af10309dc667d943c1dca177e07f79360c87970a82523e65051928

  • Size

    174KB

  • Sample

    210611-c39bfk4n66

  • MD5

    9aa9a3a32b924cd85b6fdca1a7e15e23

  • SHA1

    7d074cb41351f4ac78f202fff713125dd047adff

  • SHA256

    1cfa578898af10309dc667d943c1dca177e07f79360c87970a82523e65051928

  • SHA512

    03c4ae8dac54d632f2af4b16039ad4054ec4f5d24abb88460672f54bcce0265ed2553e7f4411483f28aa2ea9ab4ae4cb93bdaaf1da4aad8fbe16b64553a54672

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987

rc4.plain
rc4.plain

Targets

    • Target

      1cfa578898af10309dc667d943c1dca177e07f79360c87970a82523e65051928

    • Size

      174KB

    • MD5

      9aa9a3a32b924cd85b6fdca1a7e15e23

    • SHA1

      7d074cb41351f4ac78f202fff713125dd047adff

    • SHA256

      1cfa578898af10309dc667d943c1dca177e07f79360c87970a82523e65051928

    • SHA512

      03c4ae8dac54d632f2af4b16039ad4054ec4f5d24abb88460672f54bcce0265ed2553e7f4411483f28aa2ea9ab4ae4cb93bdaaf1da4aad8fbe16b64553a54672

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks