General

  • Target

    b5e60ef51f0be5203f19761b35fda1fb4bc69411c311cf52956a57a96953eaef

  • Size

    172KB

  • Sample

    210615-zjbs2ptffj

  • MD5

    c5c006049bd2788db120fceb3e7758f6

  • SHA1

    c8eb7da0b654babed47bec42908721382de96a03

  • SHA256

    b5e60ef51f0be5203f19761b35fda1fb4bc69411c311cf52956a57a96953eaef

  • SHA512

    758404b5cde982ba64c474a7635cd8408e2966fb322be530d125af71df29139365c9effa595fe1306dcd25fb251eeda00260150900b34aa22c800e3ef96a02e9

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

210.65.244.187:443

162.241.41.92:2303

46.231.204.10:8172

185.183.159.100:4125

rc4.plain
rc4.plain

Targets

    • Target

      b5e60ef51f0be5203f19761b35fda1fb4bc69411c311cf52956a57a96953eaef

    • Size

      172KB

    • MD5

      c5c006049bd2788db120fceb3e7758f6

    • SHA1

      c8eb7da0b654babed47bec42908721382de96a03

    • SHA256

      b5e60ef51f0be5203f19761b35fda1fb4bc69411c311cf52956a57a96953eaef

    • SHA512

      758404b5cde982ba64c474a7635cd8408e2966fb322be530d125af71df29139365c9effa595fe1306dcd25fb251eeda00260150900b34aa22c800e3ef96a02e9

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks