General

  • Target

    45092a57c39a89f1f57de496a4ba42e883495446bcf6e4c2086f6a8ea57eff7c

  • Size

    163KB

  • Sample

    210620-afg1mrf5gs

  • MD5

    dd2bcd6342398d751e53a10a9982f5f3

  • SHA1

    792d580f5f760267c0340b1233a1a908c180f5d7

  • SHA256

    45092a57c39a89f1f57de496a4ba42e883495446bcf6e4c2086f6a8ea57eff7c

  • SHA512

    5061f6b0553f1d52f97063ac319f84d5759bc7260348d2f993d867ef3dfaa12d6b9c57448674277b603ffb3fd55125fc811fde3120af7cd7dc1dc15554d5659e

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      45092a57c39a89f1f57de496a4ba42e883495446bcf6e4c2086f6a8ea57eff7c

    • Size

      163KB

    • MD5

      dd2bcd6342398d751e53a10a9982f5f3

    • SHA1

      792d580f5f760267c0340b1233a1a908c180f5d7

    • SHA256

      45092a57c39a89f1f57de496a4ba42e883495446bcf6e4c2086f6a8ea57eff7c

    • SHA512

      5061f6b0553f1d52f97063ac319f84d5759bc7260348d2f993d867ef3dfaa12d6b9c57448674277b603ffb3fd55125fc811fde3120af7cd7dc1dc15554d5659e

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks