General

  • Target

    ad92a24126e50c24f93482893e99b7d13cdfb48331fda5d2b818ccfa0b8fec17

  • Size

    768KB

  • Sample

    220512-pgvxwseac2

  • MD5

    fc5234190070e2831558a3d91d6cf1c2

  • SHA1

    188993c2ffd2bf3c835dc270d35b55d66d1ce245

  • SHA256

    ad92a24126e50c24f93482893e99b7d13cdfb48331fda5d2b818ccfa0b8fec17

  • SHA512

    1919f73ae052fcc4dd73e262ef99874aa1f149c59fbb5c1fec6c08d44107ae38bbed51424c834ead0ee4fefe92cd2f102055996a3645cecaca03c9cf62ad4bea

Score
10/10

Malware Config

Extracted

Family

dridex

Botnet

10111

C2

185.89.158.19:443

144.217.7.207:4443

59.10.131.141:34443

rc4.plain
rc4.plain

Targets

    • Target

      ad92a24126e50c24f93482893e99b7d13cdfb48331fda5d2b818ccfa0b8fec17

    • Size

      768KB

    • MD5

      fc5234190070e2831558a3d91d6cf1c2

    • SHA1

      188993c2ffd2bf3c835dc270d35b55d66d1ce245

    • SHA256

      ad92a24126e50c24f93482893e99b7d13cdfb48331fda5d2b818ccfa0b8fec17

    • SHA512

      1919f73ae052fcc4dd73e262ef99874aa1f149c59fbb5c1fec6c08d44107ae38bbed51424c834ead0ee4fefe92cd2f102055996a3645cecaca03c9cf62ad4bea

    Score
    10/10
    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

MITRE ATT&CK Matrix

Tasks