General

  • Target

    d26b7d1cfe266ee11a35030cc47cc4c0N.exe

  • Size

    184KB

  • Sample

    240816-dxm2faseqb

  • MD5

    d26b7d1cfe266ee11a35030cc47cc4c0

  • SHA1

    731c287d8940edea8a32c021473f0f99adb9546f

  • SHA256

    29d931229ca1096e2ef16adc3b6987696c8fad472be637edba2e8e4b51d84276

  • SHA512

    96291caebd7df3055928c377313cc153ef297b096d8f8ca0044b4e4883817c2ad720d00d19886244796b1c79558e84c4260d2d5a006ca0cd5008c0684e1b9ef1

  • SSDEEP

    3072:O92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTfrLA:O9NSMOEpQ1Q3ODAr+V3

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      d26b7d1cfe266ee11a35030cc47cc4c0N.exe

    • Size

      184KB

    • MD5

      d26b7d1cfe266ee11a35030cc47cc4c0

    • SHA1

      731c287d8940edea8a32c021473f0f99adb9546f

    • SHA256

      29d931229ca1096e2ef16adc3b6987696c8fad472be637edba2e8e4b51d84276

    • SHA512

      96291caebd7df3055928c377313cc153ef297b096d8f8ca0044b4e4883817c2ad720d00d19886244796b1c79558e84c4260d2d5a006ca0cd5008c0684e1b9ef1

    • SSDEEP

      3072:O92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTfrLA:O9NSMOEpQ1Q3ODAr+V3

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks