General

  • Target

    dc4c713c8d80a1a1105a0faa843b01e838e4ee3208edd4d98f14a322d91e6591

  • Size

    174KB

  • Sample

    210611-f2qp4gfzja

  • MD5

    61831eb724f3328ade9c8a82339a9551

  • SHA1

    1558a128d8238c991646fa0d21f722ef38cc979a

  • SHA256

    dc4c713c8d80a1a1105a0faa843b01e838e4ee3208edd4d98f14a322d91e6591

  • SHA512

    e44fca1969091b64355b172f13f2c29a5258eea0e5dd0ae8a2032639071928fac4642378aa6a9fce78e718ed164021d2953ac7861eee81187ad09e934f7d1ff4

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987

rc4.plain
rc4.plain

Targets

    • Target

      dc4c713c8d80a1a1105a0faa843b01e838e4ee3208edd4d98f14a322d91e6591

    • Size

      174KB

    • MD5

      61831eb724f3328ade9c8a82339a9551

    • SHA1

      1558a128d8238c991646fa0d21f722ef38cc979a

    • SHA256

      dc4c713c8d80a1a1105a0faa843b01e838e4ee3208edd4d98f14a322d91e6591

    • SHA512

      e44fca1969091b64355b172f13f2c29a5258eea0e5dd0ae8a2032639071928fac4642378aa6a9fce78e718ed164021d2953ac7861eee81187ad09e934f7d1ff4

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks