df13b20b1517389269393d2f8c794f8868a2626dec8afd3b7f7f4e7d70d87829

General
Target

df13b20b1517389269393d2f8c794f8868a2626dec8afd3b7f7f4e7d70d87829

Size

174KB

Sample

210611-fwr8p1l3we

Score
10 /10
MD5

080d0d42663a0915638144d9754c51c8

SHA1

ac7f8ae1e5a335c803afa9ca652c4ceb0b622fbf

SHA256

df13b20b1517389269393d2f8c794f8868a2626dec8afd3b7f7f4e7d70d87829

SHA512

14ab4ec440d4eedef4188eb0d6e2b5f861e34ca6d5f33afffd8a9a90c17cc6d21fb64ec5d49f9118ae1bd164766e470a0ff749c90bba39a4fb09dbb3c3c4e7ad

Malware Config

Extracted

Family dridex
Botnet 22201
C2

178.128.220.64:30333

45.79.91.89:9987

rc4.plain
rc4.plain
Targets
Target

df13b20b1517389269393d2f8c794f8868a2626dec8afd3b7f7f4e7d70d87829

MD5

080d0d42663a0915638144d9754c51c8

Filesize

174KB

Score
10 /10
SHA1

ac7f8ae1e5a335c803afa9ca652c4ceb0b622fbf

SHA256

df13b20b1517389269393d2f8c794f8868a2626dec8afd3b7f7f4e7d70d87829

SHA512

14ab4ec440d4eedef4188eb0d6e2b5f861e34ca6d5f33afffd8a9a90c17cc6d21fb64ec5d49f9118ae1bd164766e470a0ff749c90bba39a4fb09dbb3c3c4e7ad

Tags

Signatures

  • Dridex

    Description

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    Tags

  • Dridex Loader

    Description

    Detects Dridex both x86 and x64 loader in memory.

    Tags

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks

                          static1

                          behavioral1

                          10/10