Dridex IoC's 12-07-20

Dridex IoC's 12-07-20

Big thanks to @58_158_177_102, @bigmacjpg, @cocaman, @JAMESWT_MHT, @unixronin for providing the source or the brains to extract all of these second stage URLs.

Dridex botnet/version 10444.

C2:
104.131.164.93:443
46.101.90.205:4643
27.254.174.84:4443
92.94.251.127:3786


XLSM Stage 1 Hash:
e5cc7cb98d24d1186af5bd54de2c0ad8ff9ab2e18b2eac426ea00de7b4844401
f4c15b1eee06d45fa6115ddcfeb24bdacf54570352e0cb713e1c5895089dae1d
fa2c2ec137b588edf286ad4f4b35f509256499debeb854a20c89e5c80da41b72

DLL Stage 2 Download Links:
http://a3pixels.com/zkna6am.rar
http://alainstud.com/gqplyuc.rar
http://alosoolmedical.com/sje67bl.zip
http://aplusa.me/gv39nc80j.zip
http://aromecuisines.com/zk31fk.rar
http://basicsofcivilengineer.com/i45zm1h31.rar
http://beengo.in/ckj37g6.rar
http://bilgesifa.com/p2h3i92.zip
http://bitsell.info/v3tdsopg9.rar
http://chadtechnologies.com/naytsv.zip
http://cheap8x10s.com/oduzbo0.zip
http://eventandcasino.com/fs5ezu.rar
http://fakemoney.website/mpbr9tv.zip
http://gemtree.digitalnoirtest.net.au/axjwf10.rar
http://gro.social/g5zf9x0o0.rar
http://hrmompm.com/svtuxi.rar
http://istoricos.com/awjvcjz.rar
http://jdpallasretail.com/xr600ysqe.zip
http://kayisisatisi.com/k02fmjlp.rar
http://maisondalbon.com/h8w1s9p5.zip
http://mentorbznes.com/w8j39gz.rar
http://nooitmeerblessures.be/ae026n05d.zip
http://pano.digitalnoirtest.net.au/bd94nn9j.zip
http://partha.website-demos.net/e3898pa3.rar
http://partnerinyourprogress.com/fc5y76c.rar
http://pluxuryclothingboutique.com/vdwxf9.rar
http://prasanta.website-demos.net/jisfp6ls.rar
http://rdf.dairycare.info/dr5119.rar
http://rentalelfdepok.zaffrantrans.com/wikioy4y.rar
http://rickyg.co.uk/qsmpbl.zip
http://servermoov.e-mobiletech.com/dmau41h.rar
http://soporte.tecniprint.co/cqldeb2.rar
http://ssonear.me/zyabccz9.zip
http://statusking.droidiosking.com/avjpo99.zip
http://surveys-for-money.realcooltips.com/cqvpsb.zip
http://tashoku.com/a64slpj2e.zip
http://testing.clinicareegypt.com/xgl2675u5.rar
http://textdev.cyberbox-ph.com/sbi04mr.rar
http://thecityclub.co.in/vmr53h6u.rar
http://travelomatix.co/mjkfwv8.rar
http://virtualtoursoftware.info/btkpiz.rar
https://7alwan.net/e7xxvpn51.zip
https://accounts.mytaphouse.com/gclee4.zip
https://acuteceramic.in/cyenqd.zip
https://akbuildersdelhi.com/iknk4n0.zip
https://akhbar-press.net/r84u4kyrx.zip
https://amsolarturnkey.com/r5duor.rar
https://antiquenonwoven.com/bbw2u1alj.rar
https://arcstuff.com/ug2m31cb.rar
https://areeba.eci7.com/vy9p4l9.rar
https://armofmercy.com/u3s3ez.zip
https://bariqn.com/kyegsyf5a.rar
https://bestfreedogtraining.com/hq0duu1.rar
https://brahmagroup.com.np/p3yd2q.zip
https://bulkmaal.com/vdxxhkil8.rar
https://bureaubarac.com/dvhou7xlf.rar
https://cabellosypiel.com/k362ncwxm.rar
https://capepatioblinds.co.za/bikm1ilt.rar
https://clg-eg.com/xt3egg.rar
https://climarosario.net.ar/r3wj0a4k.zip
https://codei10.com/u0q9mfmnr.rar
https://combustibles.idubi.mx/ydjm5xwed.rar
https://cursosuaslp.com/ae824x.zip
https://daysefrotasalon.com/xns80p4w.rar
https://deepakjain.net/f64yhqfk5.zip
https://eagle-family.co.uk/b6nlu684.rar
https://englishfastfun.com/b8vs4um0.zip
https://enunviejolibro.com/kjo51sn9.zip
https://fairchildconsultants.kindnesswrites.com/nkd2c6.rar
https://fixarmobile.com/drlldnzxs.rar
https://gaminggalaxy.live/iixenux.rar
https://getmoreworkinbarnsley.co.uk/ktjh7c.zip
https://giasigiare.com/ggxp1p.rar
https://gvsme.com/r7hd8hc1.zip
https://hello.glamfitters.com/qi9owv5.zip
https://holytrinityschoolfoundation.com/h0auq3zy.zip
https://iexist.in/tus7wy.zip
https://innovent.innodaba.com/degkbth8.zip
https://kionline.net/p89cy6xn.zip
https://lp.anakruslle.com/yb01kq.zip
https://manicapital.com/g8aozt5s.rar
https://matthewraycarta.com/nbp34iz.rar
https://mercontech.com/h7zofqyy.zip
https://mindmill.me/qlqsoxy1w.zip
https://mochila.punto99.website/gcaj4m.rar
https://mymilld.com/ey9zfztry.rar
https://mysoncompanyservice.com/hdbdjx34.rar
https://nhatquangtran.com/v9zbya.rar
https://nooitmeerblessures.be/ae026n05d.zip
https://online.creedglobal.in/iz8jiri.rar
https://phuhasafety.online/qigdcf8.rar
https://rickyg.co.uk/qsmpbl.zip
https://romanianpoints.com/m7cdedu.zip
https://roopknits.com/gjib6prs.rar
https://sheeshamwoods.com/hbshy4bbf.zip
https://sortl.in/stdvqdtwy.zip
https://spsinghmedicine.com/f0qfbl.rar
https://stop-virus.co.uk/jigsqdbyo.rar
https://tapalkoedacoffee.com/azvul17n.rar
https://test.techofi.in/wu97m5zgh.rar
https://textdev.cyberbox-ph.com/sbi04mr.rar
https://thuythuysanvertex.com/im0lko.rar
https://trackdrillng.com/pdxqz1md.rar

Stage 2 DLL Hashes:
568c764fb920475200aeae0bbdda819c8428e8cf41962e497f900d88ec1e12b3
84e0298e6575e2f6d4e9ed3a578c5319e71642a020416b46652c2ed8906d2982
01020b0e9a19a67c53ceb2a3da055470fe1fd49b103ebecd4e3ca41639ae147e
9f9b93b053bd9ffec277bc7637fb5e962aadd64d3978728ae37fc7382373e529