dc4c713c8d80a1a1105a0faa843b01e838e4ee3208edd4d98f14a322d91e6591

General
Target

dc4c713c8d80a1a1105a0faa843b01e838e4ee3208edd4d98f14a322d91e6591

Size

174KB

Sample

210611-f2qp4gfzja

Score
10 /10
MD5

61831eb724f3328ade9c8a82339a9551

SHA1

1558a128d8238c991646fa0d21f722ef38cc979a

SHA256

dc4c713c8d80a1a1105a0faa843b01e838e4ee3208edd4d98f14a322d91e6591

SHA512

e44fca1969091b64355b172f13f2c29a5258eea0e5dd0ae8a2032639071928fac4642378aa6a9fce78e718ed164021d2953ac7861eee81187ad09e934f7d1ff4

Malware Config

Extracted

Family dridex
Botnet 22201
C2

178.128.220.64:30333

45.79.91.89:9987

rc4.plain
rc4.plain
Targets
Target

dc4c713c8d80a1a1105a0faa843b01e838e4ee3208edd4d98f14a322d91e6591

MD5

61831eb724f3328ade9c8a82339a9551

Filesize

174KB

Score
10 /10
SHA1

1558a128d8238c991646fa0d21f722ef38cc979a

SHA256

dc4c713c8d80a1a1105a0faa843b01e838e4ee3208edd4d98f14a322d91e6591

SHA512

e44fca1969091b64355b172f13f2c29a5258eea0e5dd0ae8a2032639071928fac4642378aa6a9fce78e718ed164021d2953ac7861eee81187ad09e934f7d1ff4

Tags

Signatures

  • Dridex

    Description

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    Tags

  • Dridex Loader

    Description

    Detects Dridex both x86 and x64 loader in memory.

    Tags

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks

                          static1

                          behavioral1

                          10/10