General

  • Target

    8f79668b34d5ca626cef262c0766033fe13a21fe32b962242f235f3d68f4543a

  • Size

    184KB

  • Sample

    240813-2a9hxszamf

  • MD5

    50c020767b65f7c30c6ea02531fa89f7

  • SHA1

    42d4f22c1bf5acfe16c9b4646e86676c94edc9a5

  • SHA256

    8f79668b34d5ca626cef262c0766033fe13a21fe32b962242f235f3d68f4543a

  • SHA512

    039e2a72a53e6c4980525b9812cfb8df91867db1cfad8122882ba5319ccff74f34b32aa3a2da44217c18664953c3a0a10918804aab11a94507952e0425eea6e0

  • SSDEEP

    3072:LiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoXlzoxss7:LiLVCIT4WK2z1W+CUHZj4Skq/eaoloC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      8f79668b34d5ca626cef262c0766033fe13a21fe32b962242f235f3d68f4543a

    • Size

      184KB

    • MD5

      50c020767b65f7c30c6ea02531fa89f7

    • SHA1

      42d4f22c1bf5acfe16c9b4646e86676c94edc9a5

    • SHA256

      8f79668b34d5ca626cef262c0766033fe13a21fe32b962242f235f3d68f4543a

    • SHA512

      039e2a72a53e6c4980525b9812cfb8df91867db1cfad8122882ba5319ccff74f34b32aa3a2da44217c18664953c3a0a10918804aab11a94507952e0425eea6e0

    • SSDEEP

      3072:LiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoXlzoxss7:LiLVCIT4WK2z1W+CUHZj4Skq/eaoloC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks