d77c04fb901e07e6dd930e541b17d17f968965c8c9a830b58a4558edf006c585

General
Target

d77c04fb901e07e6dd930e541b17d17f968965c8c9a830b58a4558edf006c585

Size

174KB

Sample

210611-zl39a63va2

Score
10 /10
MD5

b75d1727bdd175fa92190c52a2f0f876

SHA1

b438e3f625e813477aae5c19aacbb8ccea87bc1e

SHA256

d77c04fb901e07e6dd930e541b17d17f968965c8c9a830b58a4558edf006c585

SHA512

83a037cda2124579e1bf8d35003c4bf703af1ee7f835fd6dd72d8965ad21a11e4aef44675852c568710f07d01695688f4c989591afe85c3507919b4dece61916

Malware Config

Extracted

Family dridex
Botnet 22201
C2

178.128.220.64:30333

45.79.91.89:9987

rc4.plain
rc4.plain
Targets
Target

d77c04fb901e07e6dd930e541b17d17f968965c8c9a830b58a4558edf006c585

MD5

b75d1727bdd175fa92190c52a2f0f876

Filesize

174KB

Score
10 /10
SHA1

b438e3f625e813477aae5c19aacbb8ccea87bc1e

SHA256

d77c04fb901e07e6dd930e541b17d17f968965c8c9a830b58a4558edf006c585

SHA512

83a037cda2124579e1bf8d35003c4bf703af1ee7f835fd6dd72d8965ad21a11e4aef44675852c568710f07d01695688f4c989591afe85c3507919b4dece61916

Tags

Signatures

  • Dridex

    Description

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    Tags

  • Dridex Loader

    Description

    Detects Dridex both x86 and x64 loader in memory.

    Tags

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks

                          static1

                          behavioral1

                          10/10