General

  • Target

    8179bc64652d44d11b75f64430faa3bf9ebb6a4086af14ee4018b8bf36e685a3.dll

  • Size

    468KB

  • Sample

    231224-xjktpsbhf3

  • MD5

    7cd23d8209f040ad6536ac558fa7ae89

  • SHA1

    07f2bf5697e9b248d8976a0ffd238674a43380bd

  • SHA256

    8179bc64652d44d11b75f64430faa3bf9ebb6a4086af14ee4018b8bf36e685a3

  • SHA512

    7157ad3aea43054e148531b6cbd2a0f01c68aa85958be8105d8e1a2452d296a7429ccb037efc88d8a55bac92d6d8c87bda5331e0e921406a6399046fc771e61a

  • SSDEEP

    6144:n0610FnNqVnt0Rt1CVlp0R5aMSw8EekUXnAwd37izAQqK/o2B6LjiReYiL3EU:06MSw8EekuB37izvjI/gU

Malware Config

Extracted

Family

dridex

Botnet

22206

C2

120.50.40.185:443

139.59.14.223:8172

121.40.104.209:6602

139.162.113.169:593

rc4.plain
rc4.plain

Targets

    • Target

      8179bc64652d44d11b75f64430faa3bf9ebb6a4086af14ee4018b8bf36e685a3.dll

    • Size

      468KB

    • MD5

      7cd23d8209f040ad6536ac558fa7ae89

    • SHA1

      07f2bf5697e9b248d8976a0ffd238674a43380bd

    • SHA256

      8179bc64652d44d11b75f64430faa3bf9ebb6a4086af14ee4018b8bf36e685a3

    • SHA512

      7157ad3aea43054e148531b6cbd2a0f01c68aa85958be8105d8e1a2452d296a7429ccb037efc88d8a55bac92d6d8c87bda5331e0e921406a6399046fc771e61a

    • SSDEEP

      6144:n0610FnNqVnt0Rt1CVlp0R5aMSw8EekUXnAwd37izAQqK/o2B6LjiReYiL3EU:06MSw8EekuB37izvjI/gU

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks