General

  • Target

    712a98ce5318112efec35c31534ecbd80eed60c66242db30e2ee3d1c547834f9

  • Size

    184KB

  • Sample

    210810-3jdgdfw5d2

  • MD5

    40b52e77628832e50335bec1fbd52d2b

  • SHA1

    eba84c16689be099756236eb07e99a2541064520

  • SHA256

    712a98ce5318112efec35c31534ecbd80eed60c66242db30e2ee3d1c547834f9

  • SHA512

    f9751f57c18b6a7cdb996f6819bca9bbc0508bf36deb51d2aaf466267426bc64ca6ab9b1889f9c0c91fbc0eecb604befa22eea3b4581a2d2ea3a6d6b90c58d21

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664

rc4.plain
rc4.plain

Targets

    • Target

      712a98ce5318112efec35c31534ecbd80eed60c66242db30e2ee3d1c547834f9

    • Size

      184KB

    • MD5

      40b52e77628832e50335bec1fbd52d2b

    • SHA1

      eba84c16689be099756236eb07e99a2541064520

    • SHA256

      712a98ce5318112efec35c31534ecbd80eed60c66242db30e2ee3d1c547834f9

    • SHA512

      f9751f57c18b6a7cdb996f6819bca9bbc0508bf36deb51d2aaf466267426bc64ca6ab9b1889f9c0c91fbc0eecb604befa22eea3b4581a2d2ea3a6d6b90c58d21

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks