General

  • Target

    72dd9bf323f6eb515b1271d7d34ac740N.exe

  • Size

    184KB

  • Sample

    240815-zjmpeaxgqk

  • MD5

    72dd9bf323f6eb515b1271d7d34ac740

  • SHA1

    7869167a9232e1e7048af9a44cae790375d46c34

  • SHA256

    66994fef2443f548d70d74c6315531df243524fa8dab8eed525be28b6d0f175d

  • SHA512

    e13d649af4e753b96b4a6a9c6b8884845bb331ee9980c6c37de8bc2398199b5e859cef3606747611e13e7ce7826d1ea39aff88d8f630463494786b2a6fcea7ad

  • SSDEEP

    3072:uJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JWa//2uFrSc:XfYOX+wTScR/Xzku9LVwluG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      72dd9bf323f6eb515b1271d7d34ac740N.exe

    • Size

      184KB

    • MD5

      72dd9bf323f6eb515b1271d7d34ac740

    • SHA1

      7869167a9232e1e7048af9a44cae790375d46c34

    • SHA256

      66994fef2443f548d70d74c6315531df243524fa8dab8eed525be28b6d0f175d

    • SHA512

      e13d649af4e753b96b4a6a9c6b8884845bb331ee9980c6c37de8bc2398199b5e859cef3606747611e13e7ce7826d1ea39aff88d8f630463494786b2a6fcea7ad

    • SSDEEP

      3072:uJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JWa//2uFrSc:XfYOX+wTScR/Xzku9LVwluG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks