General

  • Target

    e659fd75ee98c5992217fcf9403dec50N.exe

  • Size

    184KB

  • Sample

    240816-dvcgxswgmn

  • MD5

    e659fd75ee98c5992217fcf9403dec50

  • SHA1

    161c7ea19c72e905e2b1d18812caf983f5857a08

  • SHA256

    ce877eb89fbe6957092e1a23843eb775b4b6cfdffb8a940a5a39f630b18a53a3

  • SHA512

    07efdb64cea9a6065d7b16b372606289291490be4c1d4b3584cf7814163305d642abe32148c2f7c9c855e33b01990306fe559af5a29f3ae5b1f75e9bc7d5f093

  • SSDEEP

    3072:dJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JTa//2uFrSc:mfYOX+wTScR/Xzku9LVwsuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      e659fd75ee98c5992217fcf9403dec50N.exe

    • Size

      184KB

    • MD5

      e659fd75ee98c5992217fcf9403dec50

    • SHA1

      161c7ea19c72e905e2b1d18812caf983f5857a08

    • SHA256

      ce877eb89fbe6957092e1a23843eb775b4b6cfdffb8a940a5a39f630b18a53a3

    • SHA512

      07efdb64cea9a6065d7b16b372606289291490be4c1d4b3584cf7814163305d642abe32148c2f7c9c855e33b01990306fe559af5a29f3ae5b1f75e9bc7d5f093

    • SSDEEP

      3072:dJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JTa//2uFrSc:mfYOX+wTScR/Xzku9LVwsuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks