d02217b94526882baefa009755bc9198d94a437ec9c8a54175a8e6342bc594b5

General
Target

d02217b94526882baefa009755bc9198d94a437ec9c8a54175a8e6342bc594b5

Size

174KB

Sample

210611-sv3e7flxnj

Score
10 /10
MD5

7a1dc01647eb8fe259c4fd1682a9a2df

SHA1

3230d183718645fb30cfac2500fd087f8a322ed0

SHA256

d02217b94526882baefa009755bc9198d94a437ec9c8a54175a8e6342bc594b5

SHA512

ff8ffaebaa8649b1806362ebf0a828c8616e239a1e4e35b0bb9033d2f5e7a81f1328a009738bc99452eb5fbe50b397d1e2a4f701cfb06ad9c52a782b899b583c

Malware Config

Extracted

Family dridex
Botnet 22201
C2

178.128.220.64:30333

45.79.91.89:9987

rc4.plain
rc4.plain
Targets
Target

d02217b94526882baefa009755bc9198d94a437ec9c8a54175a8e6342bc594b5

MD5

7a1dc01647eb8fe259c4fd1682a9a2df

Filesize

174KB

Score
10 /10
SHA1

3230d183718645fb30cfac2500fd087f8a322ed0

SHA256

d02217b94526882baefa009755bc9198d94a437ec9c8a54175a8e6342bc594b5

SHA512

ff8ffaebaa8649b1806362ebf0a828c8616e239a1e4e35b0bb9033d2f5e7a81f1328a009738bc99452eb5fbe50b397d1e2a4f701cfb06ad9c52a782b899b583c

Tags

Signatures

  • Dridex

    Description

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    Tags

  • Dridex Loader

    Description

    Detects Dridex both x86 and x64 loader in memory.

    Tags

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks

                          static1

                          behavioral1

                          10/10