General

  • Target

    f61868611d8833f31ea0600976087540N.exe

  • Size

    184KB

  • Sample

    240817-cyrwcavhpn

  • MD5

    f61868611d8833f31ea0600976087540

  • SHA1

    e83f202aa3f9b3d106f984a45c40fb256eb6caed

  • SHA256

    cd06ca9ad10c83fd4501c65878d84d2b4a4d47f1f8751827f8b83f66ae9d0129

  • SHA512

    ba031d214ff0efd2f77c68ce272cc4185b0c97bc2411edda51b356ae238ab260bf09c8a194620a21fd09a5dd4ed488312647976301dda18b919a9573a03dad2c

  • SSDEEP

    3072:QiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao/lzoxss7:QiLVCIT4WK2z1W+CUHZj4Skq/eaodoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      f61868611d8833f31ea0600976087540N.exe

    • Size

      184KB

    • MD5

      f61868611d8833f31ea0600976087540

    • SHA1

      e83f202aa3f9b3d106f984a45c40fb256eb6caed

    • SHA256

      cd06ca9ad10c83fd4501c65878d84d2b4a4d47f1f8751827f8b83f66ae9d0129

    • SHA512

      ba031d214ff0efd2f77c68ce272cc4185b0c97bc2411edda51b356ae238ab260bf09c8a194620a21fd09a5dd4ed488312647976301dda18b919a9573a03dad2c

    • SSDEEP

      3072:QiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao/lzoxss7:QiLVCIT4WK2z1W+CUHZj4Skq/eaodoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks