General

  • Target

    91e9eb620473e36cffcd8c046061da4983f5d81cafbf6da8f1550ee6a5b03ccf

  • Size

    184KB

  • Sample

    210810-n2wbzgf3fs

  • MD5

    6ed2bdcc3b3f6135b615b3a1691093b0

  • SHA1

    1a12cc9d540be9df8455e9fbd812f3487b325945

  • SHA256

    91e9eb620473e36cffcd8c046061da4983f5d81cafbf6da8f1550ee6a5b03ccf

  • SHA512

    497572cc8ad13b7e41affcb8746b606c7d604c1dd4ffdc9812530e1be872412d9383d057cb9856a70ba240e37755d05620200e55c9c754e9abd2d0bfd8553dc5

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664

rc4.plain
rc4.plain

Targets

    • Target

      91e9eb620473e36cffcd8c046061da4983f5d81cafbf6da8f1550ee6a5b03ccf

    • Size

      184KB

    • MD5

      6ed2bdcc3b3f6135b615b3a1691093b0

    • SHA1

      1a12cc9d540be9df8455e9fbd812f3487b325945

    • SHA256

      91e9eb620473e36cffcd8c046061da4983f5d81cafbf6da8f1550ee6a5b03ccf

    • SHA512

      497572cc8ad13b7e41affcb8746b606c7d604c1dd4ffdc9812530e1be872412d9383d057cb9856a70ba240e37755d05620200e55c9c754e9abd2d0bfd8553dc5

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks