General

  • Target

    Trojan.Win32.Dridex.SM.MTB-a57af9eef729f33f4137775c7d0f76fe43165015fa29fdb8bbc41a56f5f4c3ceN

  • Size

    188KB

  • Sample

    240918-n7bfhazapb

  • MD5

    8a20bf03c6f6d61273ae786a520ea060

  • SHA1

    6a08b4e23e191b2442a6d6579ae6dc5bf2660d2c

  • SHA256

    a57af9eef729f33f4137775c7d0f76fe43165015fa29fdb8bbc41a56f5f4c3ce

  • SHA512

    f6c0018fcaf6cdc075742d696c4d2ae67d0d73c240b5c8a57c939560fe8539c2335218cef0a7897499686a9c26b81244f8cbf09e504a167c9d06cc625b553792

  • SSDEEP

    3072:lteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzq9qM:hq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      Trojan.Win32.Dridex.SM.MTB-a57af9eef729f33f4137775c7d0f76fe43165015fa29fdb8bbc41a56f5f4c3ceN

    • Size

      188KB

    • MD5

      8a20bf03c6f6d61273ae786a520ea060

    • SHA1

      6a08b4e23e191b2442a6d6579ae6dc5bf2660d2c

    • SHA256

      a57af9eef729f33f4137775c7d0f76fe43165015fa29fdb8bbc41a56f5f4c3ce

    • SHA512

      f6c0018fcaf6cdc075742d696c4d2ae67d0d73c240b5c8a57c939560fe8539c2335218cef0a7897499686a9c26b81244f8cbf09e504a167c9d06cc625b553792

    • SSDEEP

      3072:lteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzq9qM:hq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks