General

  • Target

    5b0255dcb1e9a2b9fd0a0f2a2bce2920N.exe

  • Size

    184KB

  • Sample

    240816-hwkl5swamk

  • MD5

    5b0255dcb1e9a2b9fd0a0f2a2bce2920

  • SHA1

    5b32e7fa921eb5749eadb09ca9ae43f2a77d9be2

  • SHA256

    909f24439bd05c10854c952af9e1509d4d2e9d1cd99d212de1efe2a79c12bf16

  • SHA512

    28bccf86fd894181bb3ea27a19169b477d4ae5e83b57d3c2a949bc073dc65094957f99cf1c10152ac2e8b93a3e2cef6f819b9e1a6220f3c8d140b4455da33ed8

  • SSDEEP

    3072:e92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTsrLA:e9NSMOEpQ1Q3ODAr+VI

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      5b0255dcb1e9a2b9fd0a0f2a2bce2920N.exe

    • Size

      184KB

    • MD5

      5b0255dcb1e9a2b9fd0a0f2a2bce2920

    • SHA1

      5b32e7fa921eb5749eadb09ca9ae43f2a77d9be2

    • SHA256

      909f24439bd05c10854c952af9e1509d4d2e9d1cd99d212de1efe2a79c12bf16

    • SHA512

      28bccf86fd894181bb3ea27a19169b477d4ae5e83b57d3c2a949bc073dc65094957f99cf1c10152ac2e8b93a3e2cef6f819b9e1a6220f3c8d140b4455da33ed8

    • SSDEEP

      3072:e92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTsrLA:e9NSMOEpQ1Q3ODAr+VI

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks