General

  • Target

    8f6ec1a2d924ceaf8e6c257738505fe75c4e744bfa5b3636ae9341995c1b00fe

  • Size

    174KB

  • Sample

    210611-p6gm5gre9a

  • MD5

    86bc928ccbafa201ff8deda031b893b1

  • SHA1

    e193f10308b7fb78d35f2340cb3b831ec5a7ce12

  • SHA256

    8f6ec1a2d924ceaf8e6c257738505fe75c4e744bfa5b3636ae9341995c1b00fe

  • SHA512

    c15ed71dfca948960b658cfb0ce60431e945bc3fd879f266202c3bed0b4932dca8d39628c09b0b4739c22b0e27ff4631c5e812766179d84cbe44839cff7a42c2

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987

rc4.plain
rc4.plain

Targets

    • Target

      8f6ec1a2d924ceaf8e6c257738505fe75c4e744bfa5b3636ae9341995c1b00fe

    • Size

      174KB

    • MD5

      86bc928ccbafa201ff8deda031b893b1

    • SHA1

      e193f10308b7fb78d35f2340cb3b831ec5a7ce12

    • SHA256

      8f6ec1a2d924ceaf8e6c257738505fe75c4e744bfa5b3636ae9341995c1b00fe

    • SHA512

      c15ed71dfca948960b658cfb0ce60431e945bc3fd879f266202c3bed0b4932dca8d39628c09b0b4739c22b0e27ff4631c5e812766179d84cbe44839cff7a42c2

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks