General

  • Target

    47c59530065e8e7e05a855879bf8a922

  • Size

    524KB

  • Sample

    211226-tqs7waabhk

  • MD5

    47c59530065e8e7e05a855879bf8a922

  • SHA1

    8fba3ea2428f92e8dc8497514d0817b54edc5be0

  • SHA256

    e4db910a4147ac44bef76f71e6b0d6bd193b89a6268dda35f3b1c210cc111fe4

  • SHA512

    c99e35f6313aa75f24b7bdb1cc9e91eb7246dd7cd79de9c18f50d1f6ee27984ff075c108d1025e16dbd6d03087d11bcb6f927c5773e8a03d7bdd02c204782a42

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

104.36.167.47:443

188.40.48.93:4664

162.241.33.132:9217

217.160.5.104:593

rc4.plain
rc4.plain

Targets

    • Target

      47c59530065e8e7e05a855879bf8a922

    • Size

      524KB

    • MD5

      47c59530065e8e7e05a855879bf8a922

    • SHA1

      8fba3ea2428f92e8dc8497514d0817b54edc5be0

    • SHA256

      e4db910a4147ac44bef76f71e6b0d6bd193b89a6268dda35f3b1c210cc111fe4

    • SHA512

      c99e35f6313aa75f24b7bdb1cc9e91eb7246dd7cd79de9c18f50d1f6ee27984ff075c108d1025e16dbd6d03087d11bcb6f927c5773e8a03d7bdd02c204782a42

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks