General

  • Target

    403df42dc568507152cb0e76b7ee1920N.exe

  • Size

    184KB

  • Sample

    240817-babzjsxfnd

  • MD5

    403df42dc568507152cb0e76b7ee1920

  • SHA1

    1a04496ff1c4bf05e6aaa714ec11537447d5bd0c

  • SHA256

    b673da546e98a5f04b9a2d295b67ce8d61d63c7993aca3970934005fa4297e76

  • SHA512

    ae8994fcb0ccc553bdcf13b450c6164be36a36c81eb5e38373add8dd6b09e6d102a72114d9700c97eaf9fde94e20209285b8d7b3e0c89eb4c771d1633ccabeb0

  • SSDEEP

    3072:xJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jha//2uFrSc:SfYOX+wTScR/Xzku9LVwKuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      403df42dc568507152cb0e76b7ee1920N.exe

    • Size

      184KB

    • MD5

      403df42dc568507152cb0e76b7ee1920

    • SHA1

      1a04496ff1c4bf05e6aaa714ec11537447d5bd0c

    • SHA256

      b673da546e98a5f04b9a2d295b67ce8d61d63c7993aca3970934005fa4297e76

    • SHA512

      ae8994fcb0ccc553bdcf13b450c6164be36a36c81eb5e38373add8dd6b09e6d102a72114d9700c97eaf9fde94e20209285b8d7b3e0c89eb4c771d1633ccabeb0

    • SSDEEP

      3072:xJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jha//2uFrSc:SfYOX+wTScR/Xzku9LVwKuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks