General

  • Target

    a160b77d77017cc06f4aab8fcc2fdc20N.exe

  • Size

    184KB

  • Sample

    240814-cgmv3azbmk

  • MD5

    a160b77d77017cc06f4aab8fcc2fdc20

  • SHA1

    0bdcd9b6fea10563a54154688c83c0796cbe6d1c

  • SHA256

    35f42905f801245c1a1a6eaae29fac5a0129c9c0cfd4cd19a0aba5854bd11dcf

  • SHA512

    9ac357f2e1115c027bcc833033fa4bf016235b03e74383d5284d5ff28fe05d35850850ef4d47f110b2cfa84ad2817f39f4070dccbd69e2d814693409a77e97fd

  • SSDEEP

    3072:QW8WgWhVnmr6k/6zsRJLNqTXvMU9tb+/HU6ngmuWx9ixCH0u:78qh+66QsRdNiBW/06ngmuWexC

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664

rc4.plain
rc4.plain

Targets

    • Target

      a160b77d77017cc06f4aab8fcc2fdc20N.exe

    • Size

      184KB

    • MD5

      a160b77d77017cc06f4aab8fcc2fdc20

    • SHA1

      0bdcd9b6fea10563a54154688c83c0796cbe6d1c

    • SHA256

      35f42905f801245c1a1a6eaae29fac5a0129c9c0cfd4cd19a0aba5854bd11dcf

    • SHA512

      9ac357f2e1115c027bcc833033fa4bf016235b03e74383d5284d5ff28fe05d35850850ef4d47f110b2cfa84ad2817f39f4070dccbd69e2d814693409a77e97fd

    • SSDEEP

      3072:QW8WgWhVnmr6k/6zsRJLNqTXvMU9tb+/HU6ngmuWx9ixCH0u:78qh+66QsRdNiBW/06ngmuWexC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks