General

  • Target

    Trojan.Win32.Dridex.pz-d63881d5b89c883053a28137aaea7134732c6bdfaa596783598a3e675df711c7N

  • Size

    1.1MB

  • Sample

    240919-qqw2zszhrh

  • MD5

    76b00a7f7ec5a3465e74d8ee5a9cdf80

  • SHA1

    f9f99129cf8155ff7191763f59e8bc54ef2bab9a

  • SHA256

    d63881d5b89c883053a28137aaea7134732c6bdfaa596783598a3e675df711c7

  • SHA512

    c976a46d82bf6631f1fe378cec99fbab24ef1546ecc967239b86f8d70304a8d752aa9d25bdfea9e7fcd2f64ab15b5f002991585b6088b793bdf4d48ffa09e9df

  • SSDEEP

    12288:zSOP47es0e6yHPJGcJh+U6HKsc2Gs8PJjDKvq3kvTMnsW1qraaEXA8:zBQes0e6yHF

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.76.1.150:443

50.249.212.98:23399

104.168.154.79:5007

rc4.plain
rc4.plain

Targets

    • Target

      Trojan.Win32.Dridex.pz-d63881d5b89c883053a28137aaea7134732c6bdfaa596783598a3e675df711c7N

    • Size

      1.1MB

    • MD5

      76b00a7f7ec5a3465e74d8ee5a9cdf80

    • SHA1

      f9f99129cf8155ff7191763f59e8bc54ef2bab9a

    • SHA256

      d63881d5b89c883053a28137aaea7134732c6bdfaa596783598a3e675df711c7

    • SHA512

      c976a46d82bf6631f1fe378cec99fbab24ef1546ecc967239b86f8d70304a8d752aa9d25bdfea9e7fcd2f64ab15b5f002991585b6088b793bdf4d48ffa09e9df

    • SSDEEP

      12288:zSOP47es0e6yHPJGcJh+U6HKsc2Gs8PJjDKvq3kvTMnsW1qraaEXA8:zBQes0e6yHF

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks