473028503ff278b4da099b3581f0d1444b49ba9d3294a014edcdd018891bd298

General
Target

473028503ff278b4da099b3581f0d1444b49ba9d3294a014edcdd018891bd298

Size

170KB

Sample

210611-kj2wal8q7s

Score
10 /10
MD5

9be98aeaa48db0e6185bac6ea202aee5

SHA1

0c58d64df2beea1a76ebc4a14664e96c83040226

SHA256

473028503ff278b4da099b3581f0d1444b49ba9d3294a014edcdd018891bd298

SHA512

066117671e468dfe1957a193b90a7d861a16a95d4cf0f57f801045249ccd2dfc1b659dbf00adbffecececfd2cf661403d57e47001e30cef7885047b81807d338

Malware Config

Extracted

Family dridex
Botnet 40112
C2

128.199.200.38:443

192.163.233.216:6601

43.229.206.244:4125

rc4.plain
rc4.plain
Targets
Target

473028503ff278b4da099b3581f0d1444b49ba9d3294a014edcdd018891bd298

MD5

9be98aeaa48db0e6185bac6ea202aee5

Filesize

170KB

Score
10 /10
SHA1

0c58d64df2beea1a76ebc4a14664e96c83040226

SHA256

473028503ff278b4da099b3581f0d1444b49ba9d3294a014edcdd018891bd298

SHA512

066117671e468dfe1957a193b90a7d861a16a95d4cf0f57f801045249ccd2dfc1b659dbf00adbffecececfd2cf661403d57e47001e30cef7885047b81807d338

Tags

Signatures

  • Dridex

    Description

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    Tags

  • Dridex Loader

    Description

    Detects Dridex both x86 and x64 loader in memory.

    Tags

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks

                          static1

                          behavioral1

                          10/10