General

  • Target

    65b2a71e8172d5d4e07102152c69eede97d2ceb1da8c00b83af53a037eb41bea

  • Size

    180KB

  • Sample

    211021-y4246abfcq

  • MD5

    24c59e71e91bb28defa958d0461a1e1e

  • SHA1

    84bea40928f1036598fd7d1f102951e6b36a9424

  • SHA256

    65b2a71e8172d5d4e07102152c69eede97d2ceb1da8c00b83af53a037eb41bea

  • SHA512

    3239aab1150504a14a69d586b45718182f61904c8ab06167112d3d86db4c0ac4db5ec7d729c0a71359c5374de724b2471fb346861f9b9f62164810ecbcf522a1

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

212.237.17.99:443

176.28.17.160:6602

51.254.140.238:8333

rc4.plain
rc4.plain

Targets

    • Target

      65b2a71e8172d5d4e07102152c69eede97d2ceb1da8c00b83af53a037eb41bea

    • Size

      180KB

    • MD5

      24c59e71e91bb28defa958d0461a1e1e

    • SHA1

      84bea40928f1036598fd7d1f102951e6b36a9424

    • SHA256

      65b2a71e8172d5d4e07102152c69eede97d2ceb1da8c00b83af53a037eb41bea

    • SHA512

      3239aab1150504a14a69d586b45718182f61904c8ab06167112d3d86db4c0ac4db5ec7d729c0a71359c5374de724b2471fb346861f9b9f62164810ecbcf522a1

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks