General

  • Target

    006ac0122193622662a0dd766ac7e2c1951cc1c1d2623d683c5fc731e7225803

  • Size

    174KB

  • Sample

    210611-s9qb5yhy4s

  • MD5

    7d717e0f65b4f35c9f94aebf4abb35a7

  • SHA1

    9426078793d2b8ca1f8ae6547e0118d0ea6875f9

  • SHA256

    006ac0122193622662a0dd766ac7e2c1951cc1c1d2623d683c5fc731e7225803

  • SHA512

    e3314038b72f84b3d60eb26eb467eba3038d9e594a559f85e05865bc9ca407787a0a367c611ceae74997b43e3abe7dc256583d75cc57d2faa9faecab0d9cc175

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987

rc4.plain
rc4.plain

Targets

    • Target

      006ac0122193622662a0dd766ac7e2c1951cc1c1d2623d683c5fc731e7225803

    • Size

      174KB

    • MD5

      7d717e0f65b4f35c9f94aebf4abb35a7

    • SHA1

      9426078793d2b8ca1f8ae6547e0118d0ea6875f9

    • SHA256

      006ac0122193622662a0dd766ac7e2c1951cc1c1d2623d683c5fc731e7225803

    • SHA512

      e3314038b72f84b3d60eb26eb467eba3038d9e594a559f85e05865bc9ca407787a0a367c611ceae74997b43e3abe7dc256583d75cc57d2faa9faecab0d9cc175

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks