General

  • Target

    cbf8be917b0c7dae7e83cde3a781e8074022cc6dfa059d87c96895992b74736b

  • Size

    174KB

  • Sample

    210611-sm2c5f9xj2

  • MD5

    2b93de9fb6b448ee31455917281973ab

  • SHA1

    774db59d3d816d968d9f5669f03076bb90bffc6f

  • SHA256

    cbf8be917b0c7dae7e83cde3a781e8074022cc6dfa059d87c96895992b74736b

  • SHA512

    f657cd36872c39d3e48b3724e6332f7c0b28e19a550f747d552ba2e4aad8bb76ba6b61a77aae0baa27cc7adb46ea0157b98bdb88be4fece3c2db8f147df25d06

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987

rc4.plain
rc4.plain

Targets

    • Target

      cbf8be917b0c7dae7e83cde3a781e8074022cc6dfa059d87c96895992b74736b

    • Size

      174KB

    • MD5

      2b93de9fb6b448ee31455917281973ab

    • SHA1

      774db59d3d816d968d9f5669f03076bb90bffc6f

    • SHA256

      cbf8be917b0c7dae7e83cde3a781e8074022cc6dfa059d87c96895992b74736b

    • SHA512

      f657cd36872c39d3e48b3724e6332f7c0b28e19a550f747d552ba2e4aad8bb76ba6b61a77aae0baa27cc7adb46ea0157b98bdb88be4fece3c2db8f147df25d06

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks