General

  • Target

    105bd6fdd46434e62a63bcef200ab8c07ea1dc5034f5290383964ffcbe7acacf

  • Size

    184KB

  • Sample

    210810-2rkjtk88qa

  • MD5

    7fd123fd18306653fefc505c0e16e0bc

  • SHA1

    ee114b69850edf767eb72b299da85db74a1fce56

  • SHA256

    105bd6fdd46434e62a63bcef200ab8c07ea1dc5034f5290383964ffcbe7acacf

  • SHA512

    64eafd77c717aea13afe325aa16a5017df0c015430b6417a33061e9d37018c3f278fe587c63605b9e964a82ce6e953b74b748e71b448043ca319c75d1cd4e265

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664

rc4.plain
rc4.plain

Targets

    • Target

      105bd6fdd46434e62a63bcef200ab8c07ea1dc5034f5290383964ffcbe7acacf

    • Size

      184KB

    • MD5

      7fd123fd18306653fefc505c0e16e0bc

    • SHA1

      ee114b69850edf767eb72b299da85db74a1fce56

    • SHA256

      105bd6fdd46434e62a63bcef200ab8c07ea1dc5034f5290383964ffcbe7acacf

    • SHA512

      64eafd77c717aea13afe325aa16a5017df0c015430b6417a33061e9d37018c3f278fe587c63605b9e964a82ce6e953b74b748e71b448043ca319c75d1cd4e265

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks