General

  • Target

    a7112558eec180e34bd7f143624446893caa99b56820382b1a7f803f5ce52827

  • Size

    184KB

  • Sample

    240816-bs29fs1hql

  • MD5

    9f439c727b9c0729e7ff3d597fadd0e0

  • SHA1

    d5f1e2b2d699ad41d03b608aae5ab141d599dedb

  • SHA256

    a7112558eec180e34bd7f143624446893caa99b56820382b1a7f803f5ce52827

  • SHA512

    7469ca38c1f04340f803f8dd9fa51ac01ea6fc65f913d9d923ea315fca656de5a2c0a6b562299c1d0d5f3872f7f14484d2ad43a6c34a122c009ca17db6db21a0

  • SSDEEP

    3072:9JQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JPa//2uFrSc:GfYOX+wTScR/Xzku9LVw0uG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      a7112558eec180e34bd7f143624446893caa99b56820382b1a7f803f5ce52827

    • Size

      184KB

    • MD5

      9f439c727b9c0729e7ff3d597fadd0e0

    • SHA1

      d5f1e2b2d699ad41d03b608aae5ab141d599dedb

    • SHA256

      a7112558eec180e34bd7f143624446893caa99b56820382b1a7f803f5ce52827

    • SHA512

      7469ca38c1f04340f803f8dd9fa51ac01ea6fc65f913d9d923ea315fca656de5a2c0a6b562299c1d0d5f3872f7f14484d2ad43a6c34a122c009ca17db6db21a0

    • SSDEEP

      3072:9JQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JPa//2uFrSc:GfYOX+wTScR/Xzku9LVw0uG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks