General

  • Target

    7dffb4d62fbc51e0908bd909733ec293.exe

  • Size

    174KB

  • Sample

    240102-tb7fysbhd8

  • MD5

    7dffb4d62fbc51e0908bd909733ec293

  • SHA1

    fecfcac87bb791163ed48f7882263bd8a6654dc8

  • SHA256

    36330ee3c38ae53b19a77429e8b13c005735c93b764c0c195ee8fa5da8668017

  • SHA512

    bc8d2aa03a4664ed94c704ec61f62c3a1f3cc019dccbd38b51ea101401916b8d45542704bfea49f8fb798b861421a07949c1afe69218508920d6204702128c0c

  • SSDEEP

    3072:ZolIRLWS5rOfQ326KRrXV2h2+lMNnTZuFw7Qz+Bf1QmeQmuv5K0N+VbU:+lIRLW1m27rXVs2+SNnTZrUz+B9vpvXN

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

46.55.222.10:443

104.248.178.90:4664

173.212.243.155:7002

rc4.plain
rc4.plain

Targets

    • Target

      7dffb4d62fbc51e0908bd909733ec293.exe

    • Size

      174KB

    • MD5

      7dffb4d62fbc51e0908bd909733ec293

    • SHA1

      fecfcac87bb791163ed48f7882263bd8a6654dc8

    • SHA256

      36330ee3c38ae53b19a77429e8b13c005735c93b764c0c195ee8fa5da8668017

    • SHA512

      bc8d2aa03a4664ed94c704ec61f62c3a1f3cc019dccbd38b51ea101401916b8d45542704bfea49f8fb798b861421a07949c1afe69218508920d6204702128c0c

    • SSDEEP

      3072:ZolIRLWS5rOfQ326KRrXV2h2+lMNnTZuFw7Qz+Bf1QmeQmuv5K0N+VbU:+lIRLW1m27rXVs2+SNnTZrUz+B9vpvXN

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks