General

  • Target

    230cef5f92e36be46c6a8aadbb571290N.exe

  • Size

    184KB

  • Sample

    240817-pvta8ayenk

  • MD5

    230cef5f92e36be46c6a8aadbb571290

  • SHA1

    633ccfbe38fa47ccea1c528eb87183dd02130a4c

  • SHA256

    3ef9bd8d014bd868c8ead01438aafc6fa68c12224b8f9fbe75d159c8b9f93c82

  • SHA512

    30e1924bee93355e8f3693cdc5f28ce609406e73cc9633cdf29c04b4eae1786cd7f513f7fdad3bb3f82cc3e4f2d320830995b7b6870ad77d9a57718d92e97c90

  • SSDEEP

    3072:3JQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jfa//2uFrSc:EfYOX+wTScR/Xzku9LVwAuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      230cef5f92e36be46c6a8aadbb571290N.exe

    • Size

      184KB

    • MD5

      230cef5f92e36be46c6a8aadbb571290

    • SHA1

      633ccfbe38fa47ccea1c528eb87183dd02130a4c

    • SHA256

      3ef9bd8d014bd868c8ead01438aafc6fa68c12224b8f9fbe75d159c8b9f93c82

    • SHA512

      30e1924bee93355e8f3693cdc5f28ce609406e73cc9633cdf29c04b4eae1786cd7f513f7fdad3bb3f82cc3e4f2d320830995b7b6870ad77d9a57718d92e97c90

    • SSDEEP

      3072:3JQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jfa//2uFrSc:EfYOX+wTScR/Xzku9LVwAuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks