General

  • Target

    2934381048b2f966b308896d6edb5120N.exe

  • Size

    184KB

  • Sample

    240814-hv1lzatepp

  • MD5

    2934381048b2f966b308896d6edb5120

  • SHA1

    d1b395fdea018b16c9892e08dc1676f29d88ddfd

  • SHA256

    8124532b9d115a47b663cb1af48995586d5e4543732a51ca681d03e77032a8d0

  • SHA512

    4a16fb125523049bf6417ef3ca5e363c8ac154df364892384fa95b4dc10e0344a5e782f5218142bdef161daf7c17327d9ec1e856699b480c82a270a735e2bd4b

  • SSDEEP

    3072:7uwfhNXphcqs2tJYsoa9Xibolk0CtPBU1jhhF8ZJ8fDo4Kalmsb:57TXYsd9SkONU1jKGl5lm

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664

rc4.plain
rc4.plain

Targets

    • Target

      2934381048b2f966b308896d6edb5120N.exe

    • Size

      184KB

    • MD5

      2934381048b2f966b308896d6edb5120

    • SHA1

      d1b395fdea018b16c9892e08dc1676f29d88ddfd

    • SHA256

      8124532b9d115a47b663cb1af48995586d5e4543732a51ca681d03e77032a8d0

    • SHA512

      4a16fb125523049bf6417ef3ca5e363c8ac154df364892384fa95b4dc10e0344a5e782f5218142bdef161daf7c17327d9ec1e856699b480c82a270a735e2bd4b

    • SSDEEP

      3072:7uwfhNXphcqs2tJYsoa9Xibolk0CtPBU1jhhF8ZJ8fDo4Kalmsb:57TXYsd9SkONU1jKGl5lm

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks