General

  • Target

    0a659d5bb75bbd00e6172f2126ab8fff0e35c45275074109b29c809826a541c4.dll

  • Size

    236KB

  • Sample

    240726-qnlhgazglm

  • MD5

    054fe8737240e1c7a9ac9c271fa9cdce

  • SHA1

    4a3d6a022223757db803dcf0aa47aab0c4f10eee

  • SHA256

    0a659d5bb75bbd00e6172f2126ab8fff0e35c45275074109b29c809826a541c4

  • SHA512

    4b31d170a495abbde9e4f119fd5974f3d6edd32a2db837308f28edb4929d068363ee15e2e2bcb366b4923e4f40288d5256ad8ec80787e75c5d5385e4bcfc3b78

  • SSDEEP

    6144:g1G3WVIOY6Bdjehj+qudd96ou/6mv5wdC:g1GmSafShjYdd96z/6cwdC

Malware Config

Extracted

Family

dridex

Botnet

111

C2

52.73.70.149:443

8.4.9.152:3786

185.246.87.202:3098

50.116.111.64:5353

rc4.plain
rc4.plain

Targets

    • Target

      0a659d5bb75bbd00e6172f2126ab8fff0e35c45275074109b29c809826a541c4.dll

    • Size

      236KB

    • MD5

      054fe8737240e1c7a9ac9c271fa9cdce

    • SHA1

      4a3d6a022223757db803dcf0aa47aab0c4f10eee

    • SHA256

      0a659d5bb75bbd00e6172f2126ab8fff0e35c45275074109b29c809826a541c4

    • SHA512

      4b31d170a495abbde9e4f119fd5974f3d6edd32a2db837308f28edb4929d068363ee15e2e2bcb366b4923e4f40288d5256ad8ec80787e75c5d5385e4bcfc3b78

    • SSDEEP

      6144:g1G3WVIOY6Bdjehj+qudd96ou/6mv5wdC:g1GmSafShjYdd96z/6cwdC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks