General

  • Target

    7da2592976b11a8c4cd1f45b7d758d36b394a78f0c9549a38a45fde39533686b

  • Size

    174KB

  • Sample

    210611-rdzwgz71s2

  • MD5

    60d9998ad679433005abf64472845ba8

  • SHA1

    5eeb70de0c85caf4e9e205d7a13a08f7ad9dadfc

  • SHA256

    7da2592976b11a8c4cd1f45b7d758d36b394a78f0c9549a38a45fde39533686b

  • SHA512

    2d4266382efed4f1ef8666b3d0a3a1da82e10149159dc2bee9f66873d0cb13003232029bbae4298638e077443d748acd391453426879a7e0f718c8e8f520baa3

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987

rc4.plain
rc4.plain

Targets

    • Target

      7da2592976b11a8c4cd1f45b7d758d36b394a78f0c9549a38a45fde39533686b

    • Size

      174KB

    • MD5

      60d9998ad679433005abf64472845ba8

    • SHA1

      5eeb70de0c85caf4e9e205d7a13a08f7ad9dadfc

    • SHA256

      7da2592976b11a8c4cd1f45b7d758d36b394a78f0c9549a38a45fde39533686b

    • SHA512

      2d4266382efed4f1ef8666b3d0a3a1da82e10149159dc2bee9f66873d0cb13003232029bbae4298638e077443d748acd391453426879a7e0f718c8e8f520baa3

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks