General

  • Target

    ab458c1895bfc915d8fe8b71bb670140N.exe

  • Size

    184KB

  • Sample

    240816-e21c1avfma

  • MD5

    ab458c1895bfc915d8fe8b71bb670140

  • SHA1

    b8ba186c9146cfd1bc9f7d841ffa9c4297c88704

  • SHA256

    2975d6a4d0462ab6d562c2dc01b8c3aaa12f93b953b9395ee6022a53b7670798

  • SHA512

    c6661548045f68966da86e43bc3a45ebb735ae1004816d090d271f8401d8788a822b2d1d4426fe1d231c9828ea18db80ebedd74c86941f97a8ac606c0942b27b

  • SSDEEP

    3072:092qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMT/rLA:09NSMOEpQ1Q3ODAr+V3

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      ab458c1895bfc915d8fe8b71bb670140N.exe

    • Size

      184KB

    • MD5

      ab458c1895bfc915d8fe8b71bb670140

    • SHA1

      b8ba186c9146cfd1bc9f7d841ffa9c4297c88704

    • SHA256

      2975d6a4d0462ab6d562c2dc01b8c3aaa12f93b953b9395ee6022a53b7670798

    • SHA512

      c6661548045f68966da86e43bc3a45ebb735ae1004816d090d271f8401d8788a822b2d1d4426fe1d231c9828ea18db80ebedd74c86941f97a8ac606c0942b27b

    • SSDEEP

      3072:092qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMT/rLA:09NSMOEpQ1Q3ODAr+V3

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks