General

  • Target

    f690875a884cc5db17ccc5455a942f00N.exe

  • Size

    184KB

  • Sample

    240817-1kjjtaycqa

  • MD5

    f690875a884cc5db17ccc5455a942f00

  • SHA1

    8ab7ca7649d776b6f4674508c12535dd7a4ad0de

  • SHA256

    2f6b671d7e01c0fe454139d7aa4155be857299fd2048864aa73a715f0e3f6569

  • SHA512

    54349d9e81e6255f43240f3d4cd898db6f5352f0c9574b3d67e2a4771cc9a85d87aa7b8b1b60426235f681823a55ee11c85429a09594e6a8b886560fe7ddf17e

  • SSDEEP

    3072:dJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jla//2uFrSc:mfYOX+wTScR/Xzku9LVwGuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      f690875a884cc5db17ccc5455a942f00N.exe

    • Size

      184KB

    • MD5

      f690875a884cc5db17ccc5455a942f00

    • SHA1

      8ab7ca7649d776b6f4674508c12535dd7a4ad0de

    • SHA256

      2f6b671d7e01c0fe454139d7aa4155be857299fd2048864aa73a715f0e3f6569

    • SHA512

      54349d9e81e6255f43240f3d4cd898db6f5352f0c9574b3d67e2a4771cc9a85d87aa7b8b1b60426235f681823a55ee11c85429a09594e6a8b886560fe7ddf17e

    • SSDEEP

      3072:dJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jla//2uFrSc:mfYOX+wTScR/Xzku9LVwGuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks