General

  • Target

    e5964abd48a40232ab46d1b9114516eec7b56ead450f9871c13e623da1089b1e

  • Size

    184KB

  • Sample

    240814-bjz3qsybnq

  • MD5

    1ccfa5ecfd7f86715a98347792b16b3c

  • SHA1

    ce85c08adaec35623f8b5542e35211ce6d0e8c91

  • SHA256

    e5964abd48a40232ab46d1b9114516eec7b56ead450f9871c13e623da1089b1e

  • SHA512

    ff45919a2f9a477f85edd88fda801f9a44be414c0f8f031e0841d2c44cc1acc0efd7d1a35c7327cb5b5af2a25e9c7087eebadee5d26d923d60688b53f7e75b99

  • SSDEEP

    3072:k92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTRrLA:k9NSMOEpQ1Q3ODAr+VR

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      e5964abd48a40232ab46d1b9114516eec7b56ead450f9871c13e623da1089b1e

    • Size

      184KB

    • MD5

      1ccfa5ecfd7f86715a98347792b16b3c

    • SHA1

      ce85c08adaec35623f8b5542e35211ce6d0e8c91

    • SHA256

      e5964abd48a40232ab46d1b9114516eec7b56ead450f9871c13e623da1089b1e

    • SHA512

      ff45919a2f9a477f85edd88fda801f9a44be414c0f8f031e0841d2c44cc1acc0efd7d1a35c7327cb5b5af2a25e9c7087eebadee5d26d923d60688b53f7e75b99

    • SSDEEP

      3072:k92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTRrLA:k9NSMOEpQ1Q3ODAr+VR

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks