General

  • Target

    7211842e2f9267176ea25fd74e789a1423a2eb7af2ca06fd791bc4388827eff5

  • Size

    184KB

  • Sample

    210810-bdzcpckzz2

  • MD5

    de608746cc8b79494267a400406e81c3

  • SHA1

    6528434d4050e90e6d7e6fbb2da0a79189f5a847

  • SHA256

    7211842e2f9267176ea25fd74e789a1423a2eb7af2ca06fd791bc4388827eff5

  • SHA512

    a9a7f67ed7dc8108751a6af99ecb27909b4aae4d5ff05dd8cdeb96f5f250f413e4bdaef9bc0d7daa7bd83be5c968f525ecd8daf7615334b74d7c65e0a24041cf

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664

rc4.plain
rc4.plain

Targets

    • Target

      7211842e2f9267176ea25fd74e789a1423a2eb7af2ca06fd791bc4388827eff5

    • Size

      184KB

    • MD5

      de608746cc8b79494267a400406e81c3

    • SHA1

      6528434d4050e90e6d7e6fbb2da0a79189f5a847

    • SHA256

      7211842e2f9267176ea25fd74e789a1423a2eb7af2ca06fd791bc4388827eff5

    • SHA512

      a9a7f67ed7dc8108751a6af99ecb27909b4aae4d5ff05dd8cdeb96f5f250f413e4bdaef9bc0d7daa7bd83be5c968f525ecd8daf7615334b74d7c65e0a24041cf

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks