General

  • Target

    6aa5daa373805cdb0bf4beeee442796cdf31bbb6318727f84ff8053ec912834a

  • Size

    184KB

  • Sample

    240810-2fln2s1fqn

  • MD5

    355ba7dd3dddb1779a6a8a585cc7792d

  • SHA1

    1c448aa97985aed40ebdf6bb23ac1f5c2638ef52

  • SHA256

    6aa5daa373805cdb0bf4beeee442796cdf31bbb6318727f84ff8053ec912834a

  • SHA512

    40195ee5ba9ac59f5153b86ca736a8055979ae5b68debb7d66120f8937927c0b0afaac37dadbdac695289a8f1df2ff1588b551be19a5961c4837f687b25f6e92

  • SSDEEP

    3072:6gkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdghdA4l:zPFkq6zOe5ilSanOSd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664

rc4.plain
rc4.plain

Targets

    • Target

      6aa5daa373805cdb0bf4beeee442796cdf31bbb6318727f84ff8053ec912834a

    • Size

      184KB

    • MD5

      355ba7dd3dddb1779a6a8a585cc7792d

    • SHA1

      1c448aa97985aed40ebdf6bb23ac1f5c2638ef52

    • SHA256

      6aa5daa373805cdb0bf4beeee442796cdf31bbb6318727f84ff8053ec912834a

    • SHA512

      40195ee5ba9ac59f5153b86ca736a8055979ae5b68debb7d66120f8937927c0b0afaac37dadbdac695289a8f1df2ff1588b551be19a5961c4837f687b25f6e92

    • SSDEEP

      3072:6gkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdghdA4l:zPFkq6zOe5ilSanOSd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks