General

  • Target

    96e76e02756221460a5b1885990f9512bddcb550bfe8bb4a431f9df2a36fe99e

  • Size

    184KB

  • Sample

    240813-2ksyxszend

  • MD5

    095fd72dd29722434b0eccc270fba0bf

  • SHA1

    176d5a7c665cee7b63492edc8fdd344566d226ec

  • SHA256

    96e76e02756221460a5b1885990f9512bddcb550bfe8bb4a431f9df2a36fe99e

  • SHA512

    80d9f0dd2f2bdc89832d43520b57b14c06b88c42d6fadcf48bf585daad5eef031330283106c17b45e6cd8fff04847e067493876358482c337e89e85ada2dbd1b

  • SSDEEP

    3072:x92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTnrLA:x9NSMOEpQ1Q3ODAr+VP

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      96e76e02756221460a5b1885990f9512bddcb550bfe8bb4a431f9df2a36fe99e

    • Size

      184KB

    • MD5

      095fd72dd29722434b0eccc270fba0bf

    • SHA1

      176d5a7c665cee7b63492edc8fdd344566d226ec

    • SHA256

      96e76e02756221460a5b1885990f9512bddcb550bfe8bb4a431f9df2a36fe99e

    • SHA512

      80d9f0dd2f2bdc89832d43520b57b14c06b88c42d6fadcf48bf585daad5eef031330283106c17b45e6cd8fff04847e067493876358482c337e89e85ada2dbd1b

    • SSDEEP

      3072:x92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTnrLA:x9NSMOEpQ1Q3ODAr+VP

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks