General

  • Target

    6cd3fe0618959fa6d5de0314cb287270N.exe

  • Size

    184KB

  • Sample

    240814-d7112s1cjq

  • MD5

    6cd3fe0618959fa6d5de0314cb287270

  • SHA1

    38d88376f859e68197ffcf5d6358ce8fe61a89a5

  • SHA256

    ecc8fb9a8e0bb62b848a36890f7764cee31cd42c69a767c7f4a1bd3acdfef902

  • SHA512

    be34c960606ae4a4f55fdb5fdfc9720b1029058690a57e21414ed65a59106e5faffa218627faefd13855ffb41dae146461668cd85eda2d43c76c04f6363f1830

  • SSDEEP

    3072:lgkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdgodA4l:EPFkq6zOe5ilSanOzd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664

rc4.plain
rc4.plain

Targets

    • Target

      6cd3fe0618959fa6d5de0314cb287270N.exe

    • Size

      184KB

    • MD5

      6cd3fe0618959fa6d5de0314cb287270

    • SHA1

      38d88376f859e68197ffcf5d6358ce8fe61a89a5

    • SHA256

      ecc8fb9a8e0bb62b848a36890f7764cee31cd42c69a767c7f4a1bd3acdfef902

    • SHA512

      be34c960606ae4a4f55fdb5fdfc9720b1029058690a57e21414ed65a59106e5faffa218627faefd13855ffb41dae146461668cd85eda2d43c76c04f6363f1830

    • SSDEEP

      3072:lgkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdgodA4l:EPFkq6zOe5ilSanOzd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks