General

  • Target

    f14a98fb355d64876bc3299767d26e40N.exe

  • Size

    184KB

  • Sample

    240816-fk46aswfje

  • MD5

    f14a98fb355d64876bc3299767d26e40

  • SHA1

    475bae97015a290a15d8fdf0644d234e711a23ed

  • SHA256

    15aca3163e8b04f670baf5c09a8d4a9f248b1489c649612d7d0ccf8869c97344

  • SHA512

    93b7a68da73a48cd638a3592db86ab8f2fcd6528eaaa9fd91b996a4b292367d9aa94e8299a8e5a19fd5ff3278d77a048a9d59171ebfbc790b0b2c90c3b84070c

  • SSDEEP

    3072:YJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JTa//2uFrSc:1fYOX+wTScR/Xzku9LVwIuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      f14a98fb355d64876bc3299767d26e40N.exe

    • Size

      184KB

    • MD5

      f14a98fb355d64876bc3299767d26e40

    • SHA1

      475bae97015a290a15d8fdf0644d234e711a23ed

    • SHA256

      15aca3163e8b04f670baf5c09a8d4a9f248b1489c649612d7d0ccf8869c97344

    • SHA512

      93b7a68da73a48cd638a3592db86ab8f2fcd6528eaaa9fd91b996a4b292367d9aa94e8299a8e5a19fd5ff3278d77a048a9d59171ebfbc790b0b2c90c3b84070c

    • SSDEEP

      3072:YJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JTa//2uFrSc:1fYOX+wTScR/Xzku9LVwIuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks