General

  • Target

    b037826208f0664ea2e853840ff20790N.exe

  • Size

    184KB

  • Sample

    240815-bx7pqsxdlc

  • MD5

    b037826208f0664ea2e853840ff20790

  • SHA1

    ca5ea712d0c4e767cd9f70c70c908e1a90f30888

  • SHA256

    d41cf82271b3281920407bc2f98597cdc61106103bdb55da915a50119d1b1678

  • SHA512

    4cb8dd285ad9839c796149de75fc2b93d435805684cd07a3c171476e5a9970008c5e42c8b063c6b6e8a3f8e51aa3ab4013347703a339f0c40f4585f72c1182fc

  • SSDEEP

    3072:LW8WgWhVnmr6k/6zsRJLNqTXvMU9tb+/HU6ngmoWx9ixCH0u:S8qh+66QsRdNiBW/06ngmoWexC

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664

rc4.plain
rc4.plain

Targets

    • Target

      b037826208f0664ea2e853840ff20790N.exe

    • Size

      184KB

    • MD5

      b037826208f0664ea2e853840ff20790

    • SHA1

      ca5ea712d0c4e767cd9f70c70c908e1a90f30888

    • SHA256

      d41cf82271b3281920407bc2f98597cdc61106103bdb55da915a50119d1b1678

    • SHA512

      4cb8dd285ad9839c796149de75fc2b93d435805684cd07a3c171476e5a9970008c5e42c8b063c6b6e8a3f8e51aa3ab4013347703a339f0c40f4585f72c1182fc

    • SSDEEP

      3072:LW8WgWhVnmr6k/6zsRJLNqTXvMU9tb+/HU6ngmoWx9ixCH0u:S8qh+66QsRdNiBW/06ngmoWexC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks