General

  • Target

    ad33b5c417a10a96c478a6e3f41e968211b61a6808e7de4a5f4d592b11c86cf5

  • Size

    172KB

  • Sample

    210615-7lg27cb5fs

  • MD5

    6cbb36c1e07625888afef83a6f0134b4

  • SHA1

    335c0534b9e117245bb22500b8c00bcf1528c3c6

  • SHA256

    ad33b5c417a10a96c478a6e3f41e968211b61a6808e7de4a5f4d592b11c86cf5

  • SHA512

    c9f21480d20ec1012b25cf2f93cb76b931dfbf24053bf1ecb62eb07a08c2d0ae988365d8a120555a9cd521ef5735c349a33c570dd5f8f0d803dde15213fb834b

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

210.65.244.187:443

162.241.41.92:2303

46.231.204.10:8172

185.183.159.100:4125

rc4.plain
rc4.plain

Targets

    • Target

      ad33b5c417a10a96c478a6e3f41e968211b61a6808e7de4a5f4d592b11c86cf5

    • Size

      172KB

    • MD5

      6cbb36c1e07625888afef83a6f0134b4

    • SHA1

      335c0534b9e117245bb22500b8c00bcf1528c3c6

    • SHA256

      ad33b5c417a10a96c478a6e3f41e968211b61a6808e7de4a5f4d592b11c86cf5

    • SHA512

      c9f21480d20ec1012b25cf2f93cb76b931dfbf24053bf1ecb62eb07a08c2d0ae988365d8a120555a9cd521ef5735c349a33c570dd5f8f0d803dde15213fb834b

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks