General

  • Target

    645f390068f8adc57b56c3e148de8dee84ead38057e51d96a82f4748576f52bb

  • Size

    184KB

  • Sample

    240813-zy86ys1bqj

  • MD5

    1d7f8e1ba732933739604999a7156386

  • SHA1

    042e0fe77364c19b89a2bd808f1b206c18a552c9

  • SHA256

    645f390068f8adc57b56c3e148de8dee84ead38057e51d96a82f4748576f52bb

  • SHA512

    c747d811f7f1cbe9bf681162d44b0366bee13ac47661235f0f910299a570bb2e4474be6c5a46179da2a6e582536cf3cc12cacd185713398446001700c69bcdf4

  • SSDEEP

    3072:dJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JYa//2uFrSc:mfYOX+wTScR/Xzku9LVwfuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      645f390068f8adc57b56c3e148de8dee84ead38057e51d96a82f4748576f52bb

    • Size

      184KB

    • MD5

      1d7f8e1ba732933739604999a7156386

    • SHA1

      042e0fe77364c19b89a2bd808f1b206c18a552c9

    • SHA256

      645f390068f8adc57b56c3e148de8dee84ead38057e51d96a82f4748576f52bb

    • SHA512

      c747d811f7f1cbe9bf681162d44b0366bee13ac47661235f0f910299a570bb2e4474be6c5a46179da2a6e582536cf3cc12cacd185713398446001700c69bcdf4

    • SSDEEP

      3072:dJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JYa//2uFrSc:mfYOX+wTScR/Xzku9LVwfuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks