General

  • Target

    e023351c103b63084b21d7d0051001caab0643fc7b39f2a5b168c5e923af6430

  • Size

    476KB

  • Sample

    211206-q92rksebfr

  • MD5

    be5c2a86e8203b713825079b800b6d7c

  • SHA1

    3394ed014d307d5e8258bcac2dc7136900f42b66

  • SHA256

    e023351c103b63084b21d7d0051001caab0643fc7b39f2a5b168c5e923af6430

  • SHA512

    f599d4d00e3bc84dd103809acf93428b9568abe85a9ca106e34f112bbf9b012bf9355ee47e395187afbb0145ff2480acd472597bee6f3856ee744b7f22a7d6ad

Malware Config

Extracted

Family

dridex

Botnet

10444

C2

23.246.204.126:443

151.106.39.36:8116

103.124.144.123:6891

172.105.78.60:4664

rc4.plain
rc4.plain

Targets

    • Target

      e023351c103b63084b21d7d0051001caab0643fc7b39f2a5b168c5e923af6430

    • Size

      476KB

    • MD5

      be5c2a86e8203b713825079b800b6d7c

    • SHA1

      3394ed014d307d5e8258bcac2dc7136900f42b66

    • SHA256

      e023351c103b63084b21d7d0051001caab0643fc7b39f2a5b168c5e923af6430

    • SHA512

      f599d4d00e3bc84dd103809acf93428b9568abe85a9ca106e34f112bbf9b012bf9355ee47e395187afbb0145ff2480acd472597bee6f3856ee744b7f22a7d6ad

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks