General

  • Target

    02a4b4a64fd4e80da5d9342e39b56d70N.exe

  • Size

    184KB

  • Sample

    240815-k6s3dazfqr

  • MD5

    02a4b4a64fd4e80da5d9342e39b56d70

  • SHA1

    3171831e6448559720c528c440cad2ebfd831c52

  • SHA256

    818694060578bfd1f3bd0a1bd08675b19f7bffd76d0809dbf381662975a06687

  • SHA512

    a0ee1377747284613d9c5592b4a8fff3c5d4e238d4f9ef8c8e1d726d5c697c37026ce4dfd3036af7b4fd16876eb693e0518fbca4ed4ff85cc6d348fe762dd090

  • SSDEEP

    3072:oJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8J0a//2uFrSc:lfYOX+wTScR/Xzku9LVwbuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      02a4b4a64fd4e80da5d9342e39b56d70N.exe

    • Size

      184KB

    • MD5

      02a4b4a64fd4e80da5d9342e39b56d70

    • SHA1

      3171831e6448559720c528c440cad2ebfd831c52

    • SHA256

      818694060578bfd1f3bd0a1bd08675b19f7bffd76d0809dbf381662975a06687

    • SHA512

      a0ee1377747284613d9c5592b4a8fff3c5d4e238d4f9ef8c8e1d726d5c697c37026ce4dfd3036af7b4fd16876eb693e0518fbca4ed4ff85cc6d348fe762dd090

    • SSDEEP

      3072:oJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8J0a//2uFrSc:lfYOX+wTScR/Xzku9LVwbuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks