e65de1b1e051537f9e9e27f494bef181b68d8cb8a332c1d8ce58f282304d3e7e

General
Target

e65de1b1e051537f9e9e27f494bef181b68d8cb8a332c1d8ce58f282304d3e7e

Size

174KB

Sample

210611-lyyyaa2q6x

Score
10 /10
MD5

c5da98fe61e6e761bab6fa4bac264ced

SHA1

e1bafe69f9659bc140d65d52937a46ccfbc13bf3

SHA256

e65de1b1e051537f9e9e27f494bef181b68d8cb8a332c1d8ce58f282304d3e7e

SHA512

374a4811df43e99716dbe646a17cfceba1698064803edbd29850adfc57f19d23ccf26bf2651a5ac921a5baf8bda275fbd27782c2e944c9d7549a8d7efff32f22

Malware Config

Extracted

Family dridex
Botnet 22201
C2

178.128.220.64:30333

45.79.91.89:9987

rc4.plain
rc4.plain
Targets
Target

e65de1b1e051537f9e9e27f494bef181b68d8cb8a332c1d8ce58f282304d3e7e

MD5

c5da98fe61e6e761bab6fa4bac264ced

Filesize

174KB

Score
10 /10
SHA1

e1bafe69f9659bc140d65d52937a46ccfbc13bf3

SHA256

e65de1b1e051537f9e9e27f494bef181b68d8cb8a332c1d8ce58f282304d3e7e

SHA512

374a4811df43e99716dbe646a17cfceba1698064803edbd29850adfc57f19d23ccf26bf2651a5ac921a5baf8bda275fbd27782c2e944c9d7549a8d7efff32f22

Tags

Signatures

  • Dridex

    Description

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    Tags

  • Dridex Loader

    Description

    Detects Dridex both x86 and x64 loader in memory.

    Tags

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks

                          static1

                          behavioral1

                          10/10