General

  • Target
    SecuriteInfo.com.W32.AIDetect.malware1.29242.26721
  • Size 468KB
  • Sample211220-3at9nscger
  • SHA256 3dc02a6cf72c63b8a2308cd39d45eebc64580c74bd14027bcfb306752db0596d
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • dridex

Botnet
  • 22206

C2
  • 120.50.40.185:443

  • 139.59.14.223:8172

  • 121.40.104.209:6602

  • 139.162.113.169:593

rc4.plain
rc4.plain

Targets

    • Target
      SecuriteInfo.com.W32.AIDetect.malware1.29242.26721
    • Size 468KB
    • SHA256 3dc02a6cf72c63b8a2308cd39d45eebc64580c74bd14027bcfb306752db0596d
    • MD5 SHA1 SHA512
    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks