General

  • Target

    f2938f62f91aa71be8ba83eb79897670N.exe

  • Size

    184KB

  • Sample

    240815-z2vsqsvckc

  • MD5

    f2938f62f91aa71be8ba83eb79897670

  • SHA1

    a0f56262b07fadb92677315623870a118a78c42b

  • SHA256

    a6d0cb483c3724f8f51245af78b8d8d9f7a7eda3ffbf2d5f4838693b24efb5d6

  • SHA512

    e130aeaba32f5f903d8615f3777b66e57f09dda4357830876af6bcafd30647c304b9c033a7c19432bb03937b36178f6833c42ade76ca1234b4f814bd0f243fa5

  • SSDEEP

    3072:DJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JMa//2uFrSc:ofYOX+wTScR/Xzku9LVwLuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      f2938f62f91aa71be8ba83eb79897670N.exe

    • Size

      184KB

    • MD5

      f2938f62f91aa71be8ba83eb79897670

    • SHA1

      a0f56262b07fadb92677315623870a118a78c42b

    • SHA256

      a6d0cb483c3724f8f51245af78b8d8d9f7a7eda3ffbf2d5f4838693b24efb5d6

    • SHA512

      e130aeaba32f5f903d8615f3777b66e57f09dda4357830876af6bcafd30647c304b9c033a7c19432bb03937b36178f6833c42ade76ca1234b4f814bd0f243fa5

    • SSDEEP

      3072:DJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JMa//2uFrSc:ofYOX+wTScR/Xzku9LVwLuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks