General

  • Target

    b633c347e08e28fb3f88ef91e467d6c482476ab8ad77cd3443a9cb76a34ba444

  • Size

    173KB

  • Sample

    210620-9wwfa5ma2n

  • MD5

    f24942f4164213e0579f35767466fba6

  • SHA1

    75d185cf11c73da176ba1f37c09180cd1d4496fe

  • SHA256

    b633c347e08e28fb3f88ef91e467d6c482476ab8ad77cd3443a9cb76a34ba444

  • SHA512

    ff3f79c724b8355d80f28c459a668f23ea19a6d4a8febf718a17c690334d35eb9bb439ba3acf7305dd959dd1cfe7beba381fd22f9c267a64bd7d2426745e122b

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

94.23.86.141:13783

62.75.161.205:2303

162.214.188.105:8172

rc4.plain
rc4.plain

Targets

    • Target

      b633c347e08e28fb3f88ef91e467d6c482476ab8ad77cd3443a9cb76a34ba444

    • Size

      173KB

    • MD5

      f24942f4164213e0579f35767466fba6

    • SHA1

      75d185cf11c73da176ba1f37c09180cd1d4496fe

    • SHA256

      b633c347e08e28fb3f88ef91e467d6c482476ab8ad77cd3443a9cb76a34ba444

    • SHA512

      ff3f79c724b8355d80f28c459a668f23ea19a6d4a8febf718a17c690334d35eb9bb439ba3acf7305dd959dd1cfe7beba381fd22f9c267a64bd7d2426745e122b

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks