General

  • Target

    d77c04fb901e07e6dd930e541b17d17f968965c8c9a830b58a4558edf006c585

  • Size

    174KB

  • Sample

    210611-zl39a63va2

  • MD5

    b75d1727bdd175fa92190c52a2f0f876

  • SHA1

    b438e3f625e813477aae5c19aacbb8ccea87bc1e

  • SHA256

    d77c04fb901e07e6dd930e541b17d17f968965c8c9a830b58a4558edf006c585

  • SHA512

    83a037cda2124579e1bf8d35003c4bf703af1ee7f835fd6dd72d8965ad21a11e4aef44675852c568710f07d01695688f4c989591afe85c3507919b4dece61916

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987

rc4.plain
rc4.plain

Targets

    • Target

      d77c04fb901e07e6dd930e541b17d17f968965c8c9a830b58a4558edf006c585

    • Size

      174KB

    • MD5

      b75d1727bdd175fa92190c52a2f0f876

    • SHA1

      b438e3f625e813477aae5c19aacbb8ccea87bc1e

    • SHA256

      d77c04fb901e07e6dd930e541b17d17f968965c8c9a830b58a4558edf006c585

    • SHA512

      83a037cda2124579e1bf8d35003c4bf703af1ee7f835fd6dd72d8965ad21a11e4aef44675852c568710f07d01695688f4c989591afe85c3507919b4dece61916

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks