General

  • Target

    50970f32f71f8e7497cecbb3b051cf6c54606751baf6eaebdffa83d160333453

  • Size

    184KB

  • Sample

    240816-2l2x8avfpm

  • MD5

    9e634bae7420eb41e7022c53dab02eab

  • SHA1

    a5e6376cabc1c82292067fd5603596a21bf0300c

  • SHA256

    50970f32f71f8e7497cecbb3b051cf6c54606751baf6eaebdffa83d160333453

  • SHA512

    2bc2af836bb131d7cb5fc73c648efe9701d82d755c2e913f6116d65d15565a7ddd840b04aa8bfae7c188cf0e6a17b10c646abb134b293cb552d822d0aee92721

  • SSDEEP

    3072:092qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTlrLA:09NSMOEpQ1Q3ODAr+VF

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      50970f32f71f8e7497cecbb3b051cf6c54606751baf6eaebdffa83d160333453

    • Size

      184KB

    • MD5

      9e634bae7420eb41e7022c53dab02eab

    • SHA1

      a5e6376cabc1c82292067fd5603596a21bf0300c

    • SHA256

      50970f32f71f8e7497cecbb3b051cf6c54606751baf6eaebdffa83d160333453

    • SHA512

      2bc2af836bb131d7cb5fc73c648efe9701d82d755c2e913f6116d65d15565a7ddd840b04aa8bfae7c188cf0e6a17b10c646abb134b293cb552d822d0aee92721

    • SSDEEP

      3072:092qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTlrLA:09NSMOEpQ1Q3ODAr+VF

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks