General

  • Target

    418608ad319aaf629f6189c4930627bfff99c2ef1b1b623ce46888d6f67a82ca

  • Size

    184KB

  • Sample

    210810-1t5v3jp8mn

  • MD5

    5e5077221771f8a567cfb9bb519ffa8d

  • SHA1

    2c2a4499b546148c61e8a4782e18697e9fd6e0f0

  • SHA256

    418608ad319aaf629f6189c4930627bfff99c2ef1b1b623ce46888d6f67a82ca

  • SHA512

    ed16fdccb8e9624d0a54b1570bf244fc04d6646230ec36c5e3d393ee2432440e508840faf812abaa26156d89faf44abadb06ef5d9382c97ed922602bce713eea

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664

rc4.plain
rc4.plain

Targets

    • Target

      418608ad319aaf629f6189c4930627bfff99c2ef1b1b623ce46888d6f67a82ca

    • Size

      184KB

    • MD5

      5e5077221771f8a567cfb9bb519ffa8d

    • SHA1

      2c2a4499b546148c61e8a4782e18697e9fd6e0f0

    • SHA256

      418608ad319aaf629f6189c4930627bfff99c2ef1b1b623ce46888d6f67a82ca

    • SHA512

      ed16fdccb8e9624d0a54b1570bf244fc04d6646230ec36c5e3d393ee2432440e508840faf812abaa26156d89faf44abadb06ef5d9382c97ed922602bce713eea

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks