General

  • Target

    98ec2264df0ad1eb43a5824d871c2300N.exe

  • Size

    184KB

  • Sample

    240813-lsavba1erl

  • MD5

    98ec2264df0ad1eb43a5824d871c2300

  • SHA1

    360244e0171d03258f0cadcdf41de9a31c0283c7

  • SHA256

    c26b865b98b8b033d0cc677e2265fc15bb7f8f46b60a07ad377dd61d108c8e77

  • SHA512

    2e8b596d2b4bc295bdcfde25de791a95dfd1e7610b4c765e2383c95925d8a673ed1187458f099f460728515072c5d53b872b0127b70723d55e4ed9bfab4fa7da

  • SSDEEP

    3072:8gkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdgddA4l:JPFkq6zOe5ilSanOqd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664

rc4.plain
rc4.plain

Targets

    • Target

      98ec2264df0ad1eb43a5824d871c2300N.exe

    • Size

      184KB

    • MD5

      98ec2264df0ad1eb43a5824d871c2300

    • SHA1

      360244e0171d03258f0cadcdf41de9a31c0283c7

    • SHA256

      c26b865b98b8b033d0cc677e2265fc15bb7f8f46b60a07ad377dd61d108c8e77

    • SHA512

      2e8b596d2b4bc295bdcfde25de791a95dfd1e7610b4c765e2383c95925d8a673ed1187458f099f460728515072c5d53b872b0127b70723d55e4ed9bfab4fa7da

    • SSDEEP

      3072:8gkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdgddA4l:JPFkq6zOe5ilSanOqd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks