General

  • Target

    epix12dx.rar

  • Size

    476KB

  • Sample

    220626-f7tyvaafg3

  • MD5

    a3a64611273a16751d073c147b783c06

  • SHA1

    0757337ab4720ba52b02fca61fa5b294d6deba35

  • SHA256

    577f04df45d0e29c54c2ed22493da51147f7b07654b1551116e524dc576f4369

  • SHA512

    59f7263454511ee475742a6fa5046e1f7ba6fff82963817bfae8876cfef3f02dfe26463dfdeafcaf480d82bdfc3f5ead7cac9cf39b1dbc37932e93ee3e1f218a

Malware Config

Extracted

Family

dridex

Botnet

10444

C2

23.246.204.126:443

151.106.39.36:8116

103.124.144.123:6891

172.105.78.60:4664

rc4.plain
rc4.plain

Targets

    • Target

      epix12dx.rar

    • Size

      476KB

    • MD5

      a3a64611273a16751d073c147b783c06

    • SHA1

      0757337ab4720ba52b02fca61fa5b294d6deba35

    • SHA256

      577f04df45d0e29c54c2ed22493da51147f7b07654b1551116e524dc576f4369

    • SHA512

      59f7263454511ee475742a6fa5046e1f7ba6fff82963817bfae8876cfef3f02dfe26463dfdeafcaf480d82bdfc3f5ead7cac9cf39b1dbc37932e93ee3e1f218a

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks