General

  • Target

    64926da007bad95cdb3f3c0d1a18907b07858ed2ab73c7c0a9a6f073396a259e

  • Size

    163KB

  • Sample

    210621-2vtkqj9886

  • MD5

    544c910f5becc4a04aaa7867016f0366

  • SHA1

    63a76a1c6371f8b7cfe830af75dadfcd9c37293a

  • SHA256

    64926da007bad95cdb3f3c0d1a18907b07858ed2ab73c7c0a9a6f073396a259e

  • SHA512

    00f371ae61ba0f0e6b3e52e265a41e0d323adc1f23ffb3d171ea406073541800b2614d923ae41eb9ec46cded51c52198194e89b3593167b11b323154310de13f

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      64926da007bad95cdb3f3c0d1a18907b07858ed2ab73c7c0a9a6f073396a259e

    • Size

      163KB

    • MD5

      544c910f5becc4a04aaa7867016f0366

    • SHA1

      63a76a1c6371f8b7cfe830af75dadfcd9c37293a

    • SHA256

      64926da007bad95cdb3f3c0d1a18907b07858ed2ab73c7c0a9a6f073396a259e

    • SHA512

      00f371ae61ba0f0e6b3e52e265a41e0d323adc1f23ffb3d171ea406073541800b2614d923ae41eb9ec46cded51c52198194e89b3593167b11b323154310de13f

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks