General

  • Target

    bc26c84aeb61e6bce0784e2f1d040940N.exe

  • Size

    184KB

  • Sample

    240816-ag2ccayajp

  • MD5

    bc26c84aeb61e6bce0784e2f1d040940

  • SHA1

    b0f47ff07af8eeb5a11408fa58478b9df18d2b3a

  • SHA256

    db0df1a76f73e3c486f8708562cd12953e90d2c37af8d8f8c426d8c67013f459

  • SHA512

    b6608ac23fa02866b547d9f7ebd9ee324a931964f13680de087624abced6a69845c809b24355b3ca8be62185f10a74598f2035b2ff776915f73065e5df23a5bc

  • SSDEEP

    3072:CiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoalzoxss7:CiLVCIT4WK2z1W+CUHZj4Skq/eaowoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      bc26c84aeb61e6bce0784e2f1d040940N.exe

    • Size

      184KB

    • MD5

      bc26c84aeb61e6bce0784e2f1d040940

    • SHA1

      b0f47ff07af8eeb5a11408fa58478b9df18d2b3a

    • SHA256

      db0df1a76f73e3c486f8708562cd12953e90d2c37af8d8f8c426d8c67013f459

    • SHA512

      b6608ac23fa02866b547d9f7ebd9ee324a931964f13680de087624abced6a69845c809b24355b3ca8be62185f10a74598f2035b2ff776915f73065e5df23a5bc

    • SSDEEP

      3072:CiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoalzoxss7:CiLVCIT4WK2z1W+CUHZj4Skq/eaowoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks