dridex | 718f13940f3dce19cf3500745e1bc46c3537c23e02986096fe4192d1fc246784 | Triage

Sharing

General

Target

9daacc7a12e6b691b06d27e77f7db32d_JaffaCakes118
Size

152KB
Sample

240611-k46kpasbqq
MD5

9daacc7a12e6b691b06d27e77f7db32d
SHA1

fd2206e065e6943cfb070ec416b41d63881479c4
SHA256

718f13940f3dce19cf3500745e1bc46c3537c23e02986096fe4192d1fc246784
SHA512

e07f688e8d017a01cc275f289bb00939ef31309ac9ed6630b99483162b8c60c201765f09f71261a2e97df1f1dd42a8efe73954a8ea2f00e4870c59cf3152f747
SSDEEP

3072:aAZZpQPPgcHQeAm4SExdxfFdh/RLn4dOnBWfAeLDghx24K:aAZYPzobSExd19R74KsDgj24

Score

10^/10

dridex botnet

Malware Config

Extracted

Family

dridex

C2

104.131.41.185:443

178.62.75.204:1443

138.201.138.91:3389

62.75.191.14:3389

Targets

- Target
  
  9daacc7a12e6b691b06d27e77f7db32d_JaffaCakes118
- Size
  
  152KB
- MD5
  
  9daacc7a12e6b691b06d27e77f7db32d
- SHA1
  
  fd2206e065e6943cfb070ec416b41d63881479c4
- SHA256
  
  718f13940f3dce19cf3500745e1bc46c3537c23e02986096fe4192d1fc246784
- SHA512
  
  e07f688e8d017a01cc275f289bb00939ef31309ac9ed6630b99483162b8c60c201765f09f71261a2e97df1f1dd42a8efe73954a8ea2f00e4870c59cf3152f747
- SSDEEP
  
  3072:aAZZpQPPgcHQeAm4SExdxfFdh/RLn4dOnBWfAeLDghx24K:aAZYPzobSExd19R74KsDgj24
Score

10^/10

dridex botnet
- Dridex
  Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
  botnet dridex
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2