General

  • Target

    Dridex_ab5bb87e34b303765659b1567eacf38b27819af62e36ddee62da376890428795.zip

  • Size

    177KB

  • Sample

    220628-r93jjsbhe2

  • MD5

    7fe1ad68bd844673246b1ac9e7a2f3a2

  • SHA1

    45750490aef2ca0202bd1a0c152e907cdb29f042

  • SHA256

    9e415b25b6e319257c0da412728cf650edbaecf59782323ac369b8fe9f0c2dda

  • SHA512

    c7f6fd9ebe86ed482bc7be84fb88751c3792e8238d46e72ecd0c62ca6eec56fe227568716a027d6c36e16234dba511aae8309f5889322836be62569bde5d7ecb

Malware Config

Extracted

Family

dridex

Botnet

10111

C2

178.128.83.165:443

92.38.128.47:3389

159.65.79.173:3886

153.122.13.133:1443

rc4.plain
rc4.plain

Targets

    • Target

      Dridex_ab5bb87e34b303765659b1567eacf38b27819af62e36ddee62da376890428795.bin

    • Size

      246KB

    • MD5

      94f3907ab8628f1a31e9d03d96fa58d6

    • SHA1

      a200ff7ef8fa6d2de555100e94feffe5cf7a0948

    • SHA256

      ab5bb87e34b303765659b1567eacf38b27819af62e36ddee62da376890428795

    • SHA512

      6155a1932fddabd9c9c52e18e04121abd99a79bd85ef1e5368d02d642304699a1d996a582828736b8579367b13902bf593624e32433429ae0c221d7fade9e06e

    Score
    10/10
    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

MITRE ATT&CK Matrix

Tasks