General

  • Target

    e2d0fc38564a4381f590fa98496117fbdaac106a4f3fb48b4c171f070edb7a27

  • Size

    184KB

  • Sample

    240814-bfn63ayapr

  • MD5

    cd6788efb4d70390b7c6f019e5cac5fb

  • SHA1

    01e643bbea8d13b38bac802da5caa6e7099267d1

  • SHA256

    e2d0fc38564a4381f590fa98496117fbdaac106a4f3fb48b4c171f070edb7a27

  • SHA512

    4a13208c9176ea498d13f8f880d0627c5c1b69749f0fb196e4173c5629e8ac8f8fe2a529c2576aefe84449fe0e58e379b59b5885d05b7d542bf0df89215209ad

  • SSDEEP

    3072:lJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jra//2uFrSc:OfYOX+wTScR/Xzku9LVwQuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      e2d0fc38564a4381f590fa98496117fbdaac106a4f3fb48b4c171f070edb7a27

    • Size

      184KB

    • MD5

      cd6788efb4d70390b7c6f019e5cac5fb

    • SHA1

      01e643bbea8d13b38bac802da5caa6e7099267d1

    • SHA256

      e2d0fc38564a4381f590fa98496117fbdaac106a4f3fb48b4c171f070edb7a27

    • SHA512

      4a13208c9176ea498d13f8f880d0627c5c1b69749f0fb196e4173c5629e8ac8f8fe2a529c2576aefe84449fe0e58e379b59b5885d05b7d542bf0df89215209ad

    • SSDEEP

      3072:lJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jra//2uFrSc:OfYOX+wTScR/Xzku9LVwQuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks