General

  • Target

    88d27cc37c767d17db6f807e9c78cd30N.exe

  • Size

    184KB

  • Sample

    240818-nvhn2svflq

  • MD5

    88d27cc37c767d17db6f807e9c78cd30

  • SHA1

    8ced8fd042708544e80653abd8161ad0c14ab521

  • SHA256

    879bf5f0cbcb550e30a5a6510dfcf34f0fd708e245f8f368057121bc33aca71d

  • SHA512

    68a3291264ec1437f294abc58b3ce7e1507da6d8228feaf2e7e6b2f09066ff33e9b72eeec52e8fd11916ca6f2ba164d68db0279c312fad8f6bbcf036ed1acc57

  • SSDEEP

    3072:OJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8J6a//2uFrSc:3fYOX+wTScR/Xzku9LVw9uG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      88d27cc37c767d17db6f807e9c78cd30N.exe

    • Size

      184KB

    • MD5

      88d27cc37c767d17db6f807e9c78cd30

    • SHA1

      8ced8fd042708544e80653abd8161ad0c14ab521

    • SHA256

      879bf5f0cbcb550e30a5a6510dfcf34f0fd708e245f8f368057121bc33aca71d

    • SHA512

      68a3291264ec1437f294abc58b3ce7e1507da6d8228feaf2e7e6b2f09066ff33e9b72eeec52e8fd11916ca6f2ba164d68db0279c312fad8f6bbcf036ed1acc57

    • SSDEEP

      3072:OJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8J6a//2uFrSc:3fYOX+wTScR/Xzku9LVw9uG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks