General

  • Target

    fe0f2c288f03c94d26c85619859ca180N.exe

  • Size

    184KB

  • Sample

    240816-h6qk5swell

  • MD5

    fe0f2c288f03c94d26c85619859ca180

  • SHA1

    c983e6dd13b97ecf4877bb6e1105676ac0d3eb55

  • SHA256

    94ef3ee70521b14dc0b30ae3313fe6d4c7a5693cdea28cb87670c8583b91a140

  • SHA512

    21e86821f0e12c7037a54164513db9e0e5214feef2854a4140b55a9715debe55b03af7e5255e86fdb4c3767cb40787f57b29a0384a81eba528f866ca672dd9d5

  • SSDEEP

    3072:zJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JRa//2uFrSc:4fYOX+wTScR/Xzku9LVwGuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      fe0f2c288f03c94d26c85619859ca180N.exe

    • Size

      184KB

    • MD5

      fe0f2c288f03c94d26c85619859ca180

    • SHA1

      c983e6dd13b97ecf4877bb6e1105676ac0d3eb55

    • SHA256

      94ef3ee70521b14dc0b30ae3313fe6d4c7a5693cdea28cb87670c8583b91a140

    • SHA512

      21e86821f0e12c7037a54164513db9e0e5214feef2854a4140b55a9715debe55b03af7e5255e86fdb4c3767cb40787f57b29a0384a81eba528f866ca672dd9d5

    • SSDEEP

      3072:zJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JRa//2uFrSc:4fYOX+wTScR/Xzku9LVwGuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks