General

  • Target

    51a6358624d0cc0ceb023e2931f10dc31a6a41bd46ce01397ee73fd6b74af933

  • Size

    180KB

  • Sample

    211021-y42tdsafh2

  • MD5

    a3a5924e4c87c69d14c2502875416ba6

  • SHA1

    e013418472d02fd7b06b0acd0dceae6f864637f3

  • SHA256

    51a6358624d0cc0ceb023e2931f10dc31a6a41bd46ce01397ee73fd6b74af933

  • SHA512

    6f91c4d669945f8b6af48007fd26984b31533f7a59a4ac01d2982151731e82a00cf95d6750f9d5aa09a161cd4b91a34987df886e02a52f013f8b7f3699f7d297

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

212.237.17.99:443

176.28.17.160:6602

51.254.140.238:8333

rc4.plain
rc4.plain

Targets

    • Target

      51a6358624d0cc0ceb023e2931f10dc31a6a41bd46ce01397ee73fd6b74af933

    • Size

      180KB

    • MD5

      a3a5924e4c87c69d14c2502875416ba6

    • SHA1

      e013418472d02fd7b06b0acd0dceae6f864637f3

    • SHA256

      51a6358624d0cc0ceb023e2931f10dc31a6a41bd46ce01397ee73fd6b74af933

    • SHA512

      6f91c4d669945f8b6af48007fd26984b31533f7a59a4ac01d2982151731e82a00cf95d6750f9d5aa09a161cd4b91a34987df886e02a52f013f8b7f3699f7d297

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks