General

  • Target

    34edf4acab5a1974f86dc9e61134d090N.exe

  • Size

    184KB

  • Sample

    240815-1fnyqswcjb

  • MD5

    34edf4acab5a1974f86dc9e61134d090

  • SHA1

    f43cb4b0b190bdac4568147cf5e410f50979b92e

  • SHA256

    23a6a177517bf68fa586ede093fcdfe1964afdca75d298e1d394638d0f896f29

  • SHA512

    3277538c467f5d155a283aaa4769960c25c409654b9bdabab5d5fc67eacae2189955ec6d7549af74352ec303e256ee1c9c149ff44e8b7ba6951bd37b4a6d0bcc

  • SSDEEP

    3072:JJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jva//2uFrSc:qfYOX+wTScR/Xzku9LVwguG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      34edf4acab5a1974f86dc9e61134d090N.exe

    • Size

      184KB

    • MD5

      34edf4acab5a1974f86dc9e61134d090

    • SHA1

      f43cb4b0b190bdac4568147cf5e410f50979b92e

    • SHA256

      23a6a177517bf68fa586ede093fcdfe1964afdca75d298e1d394638d0f896f29

    • SHA512

      3277538c467f5d155a283aaa4769960c25c409654b9bdabab5d5fc67eacae2189955ec6d7549af74352ec303e256ee1c9c149ff44e8b7ba6951bd37b4a6d0bcc

    • SSDEEP

      3072:JJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jva//2uFrSc:qfYOX+wTScR/Xzku9LVwguG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks