General

  • Target

    87046bd22099a12e0bf795f5068d330af93f8d7cb9af27d4016dceb7b82c6a49

  • Size

    244KB

  • Sample

    211018-zd66vsffdl

  • MD5

    0ff2c4b04a4f31bb7ec8c88ad9c06c14

  • SHA1

    330a37fdcafea1cacd10ad7393bc472bb2e03d9a

  • SHA256

    87046bd22099a12e0bf795f5068d330af93f8d7cb9af27d4016dceb7b82c6a49

  • SHA512

    1f5b3da0bb89ff654e79aa4134035b05b12fa7694d5a8464c3e2975f4abccadf953f7488b17634ab97201216533b61dd2fc359d18c24127e0f02268675aa73ef

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

195.154.146.84:443

45.56.121.87:8116

157.245.222.44:5723

rc4.plain
rc4.plain

Targets

    • Target

      87046bd22099a12e0bf795f5068d330af93f8d7cb9af27d4016dceb7b82c6a49

    • Size

      244KB

    • MD5

      0ff2c4b04a4f31bb7ec8c88ad9c06c14

    • SHA1

      330a37fdcafea1cacd10ad7393bc472bb2e03d9a

    • SHA256

      87046bd22099a12e0bf795f5068d330af93f8d7cb9af27d4016dceb7b82c6a49

    • SHA512

      1f5b3da0bb89ff654e79aa4134035b05b12fa7694d5a8464c3e2975f4abccadf953f7488b17634ab97201216533b61dd2fc359d18c24127e0f02268675aa73ef

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks