General

  • Target

    25d1022731f383727942911198bc13a55a4536a8bb28c38a908abd400cb5d54b

  • Size

    174KB

  • Sample

    210611-fkdf6qw66e

  • MD5

    613a7f00e516c420b613f1b30a7bbe90

  • SHA1

    a1f6b112b896032344d22f3ad59d7ef041a96fe2

  • SHA256

    25d1022731f383727942911198bc13a55a4536a8bb28c38a908abd400cb5d54b

  • SHA512

    b9d65808e061e9f2bbb32d67ede2f8d52a7719d48c4fdd4cf02130e0063d76ad15e98dffd06aedc377d2ecad6c7480920942ea0504cfa1fdca45eddcb1ec4319

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987

rc4.plain
rc4.plain

Targets

    • Target

      25d1022731f383727942911198bc13a55a4536a8bb28c38a908abd400cb5d54b

    • Size

      174KB

    • MD5

      613a7f00e516c420b613f1b30a7bbe90

    • SHA1

      a1f6b112b896032344d22f3ad59d7ef041a96fe2

    • SHA256

      25d1022731f383727942911198bc13a55a4536a8bb28c38a908abd400cb5d54b

    • SHA512

      b9d65808e061e9f2bbb32d67ede2f8d52a7719d48c4fdd4cf02130e0063d76ad15e98dffd06aedc377d2ecad6c7480920942ea0504cfa1fdca45eddcb1ec4319

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks