General

  • Target

    404e957c65e6fb2eeca74aa775ca01c0N.exe

  • Size

    184KB

  • Sample

    240815-1q1qaawhlg

  • MD5

    404e957c65e6fb2eeca74aa775ca01c0

  • SHA1

    285f84e6387b7a970287edcaabb18c2abe284e50

  • SHA256

    4e162478210d519cd472cd93883169383535b8d1416a782dc8f10dc417bea2a1

  • SHA512

    7c320d9496a218220701acb2827fe7eea9cd71628e3c0aab1821d2ddcdf91e9493565d43781b720f885d3d10b4ae14a76c432e64689986b13384b381c2951090

  • SSDEEP

    3072:/iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoglzoxss7:/iLVCIT4WK2z1W+CUHZj4Skq/eaoeoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      404e957c65e6fb2eeca74aa775ca01c0N.exe

    • Size

      184KB

    • MD5

      404e957c65e6fb2eeca74aa775ca01c0

    • SHA1

      285f84e6387b7a970287edcaabb18c2abe284e50

    • SHA256

      4e162478210d519cd472cd93883169383535b8d1416a782dc8f10dc417bea2a1

    • SHA512

      7c320d9496a218220701acb2827fe7eea9cd71628e3c0aab1821d2ddcdf91e9493565d43781b720f885d3d10b4ae14a76c432e64689986b13384b381c2951090

    • SSDEEP

      3072:/iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoglzoxss7:/iLVCIT4WK2z1W+CUHZj4Skq/eaoeoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks