General

  • Target

    f8afa9359cca5651be1e913a8bf53030N.exe

  • Size

    184KB

  • Sample

    240817-w2d87szdkf

  • MD5

    f8afa9359cca5651be1e913a8bf53030

  • SHA1

    0a04f80f48f60d578c303284680ab6e2519f9e8d

  • SHA256

    cce501b781f82597199ebef1e1d4dfeff6160aac5993cf82edda4079f17f3fab

  • SHA512

    2da0c4e5faff7ace7e3f748cdb3adf67679aa2073a94fe8bf2a22259d47059a0ad3db16eb6889f2ef8169e04a633404554d6b3298fa57303dff0b104eb0aab0a

  • SSDEEP

    3072:DJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jga//2uFrSc:ofYOX+wTScR/Xzku9LVwzuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      f8afa9359cca5651be1e913a8bf53030N.exe

    • Size

      184KB

    • MD5

      f8afa9359cca5651be1e913a8bf53030

    • SHA1

      0a04f80f48f60d578c303284680ab6e2519f9e8d

    • SHA256

      cce501b781f82597199ebef1e1d4dfeff6160aac5993cf82edda4079f17f3fab

    • SHA512

      2da0c4e5faff7ace7e3f748cdb3adf67679aa2073a94fe8bf2a22259d47059a0ad3db16eb6889f2ef8169e04a633404554d6b3298fa57303dff0b104eb0aab0a

    • SSDEEP

      3072:DJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jga//2uFrSc:ofYOX+wTScR/Xzku9LVwzuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks