General

  • Target

    f90bfa819bb11ee27bdf09a976347720N.exe

  • Size

    184KB

  • Sample

    240815-xqcrnsybra

  • MD5

    f90bfa819bb11ee27bdf09a976347720

  • SHA1

    996e8faf255e45efdfdd4cf39a754f0760a3adac

  • SHA256

    f2d6303d7a40440909ec7313bd11876906a8be42c561ef0753990c395bce14eb

  • SHA512

    a4ced9d99c89753ce3b1646b7a85535c4a0308c061f604e04d9ba41bc67637cf141651a23fcab2d06e0343211b97205742763eb362ab6aaede0349a40235d34c

  • SSDEEP

    3072:C92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTKrLA:C9NSMOEpQ1Q3ODAr+Ve

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      f90bfa819bb11ee27bdf09a976347720N.exe

    • Size

      184KB

    • MD5

      f90bfa819bb11ee27bdf09a976347720

    • SHA1

      996e8faf255e45efdfdd4cf39a754f0760a3adac

    • SHA256

      f2d6303d7a40440909ec7313bd11876906a8be42c561ef0753990c395bce14eb

    • SHA512

      a4ced9d99c89753ce3b1646b7a85535c4a0308c061f604e04d9ba41bc67637cf141651a23fcab2d06e0343211b97205742763eb362ab6aaede0349a40235d34c

    • SSDEEP

      3072:C92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTKrLA:C9NSMOEpQ1Q3ODAr+Ve

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks