General

  • Target

    5218adcb15205e6605359a54dc34d2915c57797e84d749ea79f330a40cb8542d

  • Size

    174KB

  • Sample

    210611-wm5d7ag1mj

  • MD5

    0289900156f2f57eb67f7dc50ebc9d8e

  • SHA1

    6ae315b82515d606c046321343177e926581e8f4

  • SHA256

    5218adcb15205e6605359a54dc34d2915c57797e84d749ea79f330a40cb8542d

  • SHA512

    f4502a194f88336cfc4913f7763d3108877652c98be484e181931b737854b00ae026704ec1875e463bdf4af3eed00a4b67566f8204b213e397befd6560b9f785

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987

rc4.plain
rc4.plain

Targets

    • Target

      5218adcb15205e6605359a54dc34d2915c57797e84d749ea79f330a40cb8542d

    • Size

      174KB

    • MD5

      0289900156f2f57eb67f7dc50ebc9d8e

    • SHA1

      6ae315b82515d606c046321343177e926581e8f4

    • SHA256

      5218adcb15205e6605359a54dc34d2915c57797e84d749ea79f330a40cb8542d

    • SHA512

      f4502a194f88336cfc4913f7763d3108877652c98be484e181931b737854b00ae026704ec1875e463bdf4af3eed00a4b67566f8204b213e397befd6560b9f785

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks