General

  • Target

    fdc68ca14a282275fb117e04a9c38a30N.exe

  • Size

    184KB

  • Sample

    240814-y3anhsscme

  • MD5

    fdc68ca14a282275fb117e04a9c38a30

  • SHA1

    dfc6570c55d7cbc7dad22b93ec8f67260d633ea5

  • SHA256

    28153796a530cc6e4b152af299324c9408571a20f639de932ec1f776d3f0e5af

  • SHA512

    7b3e3d2736d7fc75b628f791c6b71109f9cd45c3799c3070b3b20d875bb6e35d659e4d27387bdc45617bc0c38f80538f5b1a2cc5e23845f8de55791aaa999d03

  • SSDEEP

    3072:9W8WgWhVnmr6k/6zsRJLNqTXvMU9tb+/HU6ngmyWx9ixCH0u:48qh+66QsRdNiBW/06ngmyWexC

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664

rc4.plain
rc4.plain

Targets

    • Target

      fdc68ca14a282275fb117e04a9c38a30N.exe

    • Size

      184KB

    • MD5

      fdc68ca14a282275fb117e04a9c38a30

    • SHA1

      dfc6570c55d7cbc7dad22b93ec8f67260d633ea5

    • SHA256

      28153796a530cc6e4b152af299324c9408571a20f639de932ec1f776d3f0e5af

    • SHA512

      7b3e3d2736d7fc75b628f791c6b71109f9cd45c3799c3070b3b20d875bb6e35d659e4d27387bdc45617bc0c38f80538f5b1a2cc5e23845f8de55791aaa999d03

    • SSDEEP

      3072:9W8WgWhVnmr6k/6zsRJLNqTXvMU9tb+/HU6ngmyWx9ixCH0u:48qh+66QsRdNiBW/06ngmyWexC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks