General

  • Target
    SecuriteInfo.com.W32.AIDetect.malware2.8406.30944
  • Size 508KB
  • Sample211221-dlr61schgr
  • SHA256 e90c994527d5fff3e13ff2cc4e28c90cb7ed9fd1d1bfdc214074ca91c484d519
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • dridex

Botnet
  • 22202

C2
  • 144.91.122.100:443

  • 188.214.241.242:4664

  • 93.104.209.107:8116

  • 5.189.190.214:593

rc4.plain
rc4.plain

Targets

    • Target
      SecuriteInfo.com.W32.AIDetect.malware2.8406.30944
    • Size 508KB
    • SHA256 e90c994527d5fff3e13ff2cc4e28c90cb7ed9fd1d1bfdc214074ca91c484d519
    • MD5 SHA1 SHA512
    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks