General

  • Target

    dfce645799db8f91da3130e685a13fc0N.exe

  • Size

    184KB

  • Sample

    240815-z7h15avfjb

  • MD5

    dfce645799db8f91da3130e685a13fc0

  • SHA1

    7ce5f5358f19a6dadc6afd4d209abb6e2431cf57

  • SHA256

    2ea2b267004e6fbca9f4e3f57f08b9508deb57dd48224996863953c527a8fb12

  • SHA512

    2f0f95f14c4f6cc420b3b61cceb98ff1c288f7c9b979f45c56c4628a3abe039e62c26b06a02ebccf34dec50047e07322f163192c7976e506cf090c3a988f35b9

  • SSDEEP

    3072:092qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMT1rLA:09NSMOEpQ1Q3ODAr+Vt

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      dfce645799db8f91da3130e685a13fc0N.exe

    • Size

      184KB

    • MD5

      dfce645799db8f91da3130e685a13fc0

    • SHA1

      7ce5f5358f19a6dadc6afd4d209abb6e2431cf57

    • SHA256

      2ea2b267004e6fbca9f4e3f57f08b9508deb57dd48224996863953c527a8fb12

    • SHA512

      2f0f95f14c4f6cc420b3b61cceb98ff1c288f7c9b979f45c56c4628a3abe039e62c26b06a02ebccf34dec50047e07322f163192c7976e506cf090c3a988f35b9

    • SSDEEP

      3072:092qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMT1rLA:09NSMOEpQ1Q3ODAr+Vt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks