General

  • Target

    24db2c238a80d9841af8c57e59173b94c0e838ca6136049f0779daf3b4dd26f5

  • Size

    188KB

  • Sample

    240817-ysff1stfqc

  • MD5

    fbe2c7bfbcc19e2c7130edd2e762b13c

  • SHA1

    37a5da8bcb8d8307fbab09bf4656f8dd83f9eba6

  • SHA256

    24db2c238a80d9841af8c57e59173b94c0e838ca6136049f0779daf3b4dd26f5

  • SHA512

    92acb4a6ab6d73cbf30b2fd69d14deea3b037187911a37e8f1c2f48cc09761b8e180e84e30832b17592158d4390520533ffcd2cc4eba599d9f94a0c231684e69

  • SSDEEP

    3072:bWa3N1eqJ7cNe58per6JpynepWHVD9qMe402JYIUk9H8Iz83SWx9klSC:NxwO/Spynep6VDcMeQeIUk9cI6Z5

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

134.209.182.12:443

188.40.100.254:4664

103.109.247.9:10443

rc4.plain
rc4.plain

Targets

    • Target

      24db2c238a80d9841af8c57e59173b94c0e838ca6136049f0779daf3b4dd26f5

    • Size

      188KB

    • MD5

      fbe2c7bfbcc19e2c7130edd2e762b13c

    • SHA1

      37a5da8bcb8d8307fbab09bf4656f8dd83f9eba6

    • SHA256

      24db2c238a80d9841af8c57e59173b94c0e838ca6136049f0779daf3b4dd26f5

    • SHA512

      92acb4a6ab6d73cbf30b2fd69d14deea3b037187911a37e8f1c2f48cc09761b8e180e84e30832b17592158d4390520533ffcd2cc4eba599d9f94a0c231684e69

    • SSDEEP

      3072:bWa3N1eqJ7cNe58per6JpynepWHVD9qMe402JYIUk9H8Iz83SWx9klSC:NxwO/Spynep6VDcMeQeIUk9cI6Z5

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks