General

  • Target

    3c7cd1f8dab50f2332b60103a2284a14779591264533790844cf85e899a6836b

  • Size

    174KB

  • Sample

    210611-c73la58frj

  • MD5

    373671a502aab9c2ae9955eadbffd561

  • SHA1

    a66ce38a6aee22aaab67649e11f3fe9f7f1c87f9

  • SHA256

    3c7cd1f8dab50f2332b60103a2284a14779591264533790844cf85e899a6836b

  • SHA512

    1fc52477c5b2b5fddb93d4918cfed5fa281e3a09ce825ee42feb6467c8f0c3a0b9a090345ed741cfee8c0668c30029fae922639cdf63bcee819f837869fd08fc

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987

rc4.plain
rc4.plain

Targets

    • Target

      3c7cd1f8dab50f2332b60103a2284a14779591264533790844cf85e899a6836b

    • Size

      174KB

    • MD5

      373671a502aab9c2ae9955eadbffd561

    • SHA1

      a66ce38a6aee22aaab67649e11f3fe9f7f1c87f9

    • SHA256

      3c7cd1f8dab50f2332b60103a2284a14779591264533790844cf85e899a6836b

    • SHA512

      1fc52477c5b2b5fddb93d4918cfed5fa281e3a09ce825ee42feb6467c8f0c3a0b9a090345ed741cfee8c0668c30029fae922639cdf63bcee819f837869fd08fc

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks