General

  • Target

    e65de1b1e051537f9e9e27f494bef181b68d8cb8a332c1d8ce58f282304d3e7e

  • Size

    174KB

  • Sample

    210611-lyyyaa2q6x

  • MD5

    c5da98fe61e6e761bab6fa4bac264ced

  • SHA1

    e1bafe69f9659bc140d65d52937a46ccfbc13bf3

  • SHA256

    e65de1b1e051537f9e9e27f494bef181b68d8cb8a332c1d8ce58f282304d3e7e

  • SHA512

    374a4811df43e99716dbe646a17cfceba1698064803edbd29850adfc57f19d23ccf26bf2651a5ac921a5baf8bda275fbd27782c2e944c9d7549a8d7efff32f22

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987

rc4.plain
rc4.plain

Targets

    • Target

      e65de1b1e051537f9e9e27f494bef181b68d8cb8a332c1d8ce58f282304d3e7e

    • Size

      174KB

    • MD5

      c5da98fe61e6e761bab6fa4bac264ced

    • SHA1

      e1bafe69f9659bc140d65d52937a46ccfbc13bf3

    • SHA256

      e65de1b1e051537f9e9e27f494bef181b68d8cb8a332c1d8ce58f282304d3e7e

    • SHA512

      374a4811df43e99716dbe646a17cfceba1698064803edbd29850adfc57f19d23ccf26bf2651a5ac921a5baf8bda275fbd27782c2e944c9d7549a8d7efff32f22

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks