General

  • Target

    d807a798877099d313ce47bfc818c927962d2c32cccb2d975f0dccbbb1a791de

  • Size

    174KB

  • Sample

    210611-yj3qw39df6

  • MD5

    d3b34393e38e4f86a94b2bb1a89536eb

  • SHA1

    8e9b4848bfc9b30c8819de21e484a812c1da26cb

  • SHA256

    d807a798877099d313ce47bfc818c927962d2c32cccb2d975f0dccbbb1a791de

  • SHA512

    ba861377510ec03b49f12369470641201098a3b429678dbaa82e4f8391b96037b20ef3b5b209b990c1ca21a0a871fdb3a3529d58bf387962b9cfdf48f02d4506

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987

rc4.plain
rc4.plain

Targets

    • Target

      d807a798877099d313ce47bfc818c927962d2c32cccb2d975f0dccbbb1a791de

    • Size

      174KB

    • MD5

      d3b34393e38e4f86a94b2bb1a89536eb

    • SHA1

      8e9b4848bfc9b30c8819de21e484a812c1da26cb

    • SHA256

      d807a798877099d313ce47bfc818c927962d2c32cccb2d975f0dccbbb1a791de

    • SHA512

      ba861377510ec03b49f12369470641201098a3b429678dbaa82e4f8391b96037b20ef3b5b209b990c1ca21a0a871fdb3a3529d58bf387962b9cfdf48f02d4506

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks