General

  • Target

    f96ca44a444cf8bdbbdb8da526452630N.exe

  • Size

    184KB

  • Sample

    240816-ftk4saxara

  • MD5

    f96ca44a444cf8bdbbdb8da526452630

  • SHA1

    31abf1c98daab9e8072e3605d67391f9e3c916b6

  • SHA256

    327815c9fa19a7d2f7be77f1fd2fd7db616e223e974d2c8462df86a83566af1d

  • SHA512

    42ad5026f6699111d995996b18c4275cdce4f5f252eb3ba65f302dce7da6d5f81c159feb4852c18c7391cbb1df1778ccd25807bd9275d1779600681b8f5ce821

  • SSDEEP

    3072:yJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JJa//2uFrSc:zfYOX+wTScR/Xzku9LVwauG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      f96ca44a444cf8bdbbdb8da526452630N.exe

    • Size

      184KB

    • MD5

      f96ca44a444cf8bdbbdb8da526452630

    • SHA1

      31abf1c98daab9e8072e3605d67391f9e3c916b6

    • SHA256

      327815c9fa19a7d2f7be77f1fd2fd7db616e223e974d2c8462df86a83566af1d

    • SHA512

      42ad5026f6699111d995996b18c4275cdce4f5f252eb3ba65f302dce7da6d5f81c159feb4852c18c7391cbb1df1778ccd25807bd9275d1779600681b8f5ce821

    • SSDEEP

      3072:yJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JJa//2uFrSc:zfYOX+wTScR/Xzku9LVwauG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks