General

  • Target

    343f46b7742113d51d1b6431b83d32c3702284fc4c13122c14f9a89854be66c4

  • Size

    184KB

  • Sample

    240816-zw13kazhqq

  • MD5

    47f1e23363834e4d2a2dec2eb17ae757

  • SHA1

    bbd4b671cee2b15977335a1beeb2aa6baff26508

  • SHA256

    343f46b7742113d51d1b6431b83d32c3702284fc4c13122c14f9a89854be66c4

  • SHA512

    f91f835d05bf805e205330118ae2654ef2492de8059932ef52658f505ef0361bbe0518a09d655fc4853c9cf1e44e870c562f3af5c1bfa0f0896bc442253e8e66

  • SSDEEP

    3072:592qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTyrLA:59NSMOEpQ1Q3ODAr+Vm

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      343f46b7742113d51d1b6431b83d32c3702284fc4c13122c14f9a89854be66c4

    • Size

      184KB

    • MD5

      47f1e23363834e4d2a2dec2eb17ae757

    • SHA1

      bbd4b671cee2b15977335a1beeb2aa6baff26508

    • SHA256

      343f46b7742113d51d1b6431b83d32c3702284fc4c13122c14f9a89854be66c4

    • SHA512

      f91f835d05bf805e205330118ae2654ef2492de8059932ef52658f505ef0361bbe0518a09d655fc4853c9cf1e44e870c562f3af5c1bfa0f0896bc442253e8e66

    • SSDEEP

      3072:592qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTyrLA:59NSMOEpQ1Q3ODAr+Vm

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks