487f058ae02ca92bdaf36b352f4540c35bd72f7934a00fe60e9e4a0ddde1af10

General
Target

487f058ae02ca92bdaf36b352f4540c35bd72f7934a00fe60e9e4a0ddde1af10

Size

174KB

Sample

210611-qn5afpswta

Score
10 /10
MD5

179225711b802811f3a677998506a0b5

SHA1

5df4b5653363340965c1210d4b3adf31842ed924

SHA256

487f058ae02ca92bdaf36b352f4540c35bd72f7934a00fe60e9e4a0ddde1af10

SHA512

43613b5ef96809bdd5974d1dc0dcc4a99a787e102bcd757585b8a0a77c098b84eee61915501ba8f9b4f00c9a731a5c813065e3e82c923037829662d44b4e9b40

Malware Config

Extracted

Family dridex
Botnet 22201
C2

178.128.220.64:30333

45.79.91.89:9987

rc4.plain
rc4.plain
Targets
Target

487f058ae02ca92bdaf36b352f4540c35bd72f7934a00fe60e9e4a0ddde1af10

MD5

179225711b802811f3a677998506a0b5

Filesize

174KB

Score
10 /10
SHA1

5df4b5653363340965c1210d4b3adf31842ed924

SHA256

487f058ae02ca92bdaf36b352f4540c35bd72f7934a00fe60e9e4a0ddde1af10

SHA512

43613b5ef96809bdd5974d1dc0dcc4a99a787e102bcd757585b8a0a77c098b84eee61915501ba8f9b4f00c9a731a5c813065e3e82c923037829662d44b4e9b40

Tags

Signatures

  • Dridex

    Description

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    Tags

  • Dridex Loader

    Description

    Detects Dridex both x86 and x64 loader in memory.

    Tags

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks

                          static1

                          behavioral1

                          10/10