General

  • Target

    1ced9c9672694f380d6c5ab385af6860N.exe

  • Size

    184KB

  • Sample

    240819-1nkahs1fql

  • MD5

    1ced9c9672694f380d6c5ab385af6860

  • SHA1

    29b5f638d2fdfa54e18c13d767cbdf60bae1762d

  • SHA256

    7437f7e9596eb54495c6595c6ac2f8f8410f84d4fdf3775b930ad6807ebcfbef

  • SHA512

    f360b2c2ede693cf919922e893e4b40530d7422038b603b0b493684e09d9ca5e8f11a0bf95e1cc7dfb498b8687100dbc4aab98b58e5b77b1ecc9806f84e1dee1

  • SSDEEP

    3072:cJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JWa//2uFrSc:hfYOX+wTScR/Xzku9LVwhuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      1ced9c9672694f380d6c5ab385af6860N.exe

    • Size

      184KB

    • MD5

      1ced9c9672694f380d6c5ab385af6860

    • SHA1

      29b5f638d2fdfa54e18c13d767cbdf60bae1762d

    • SHA256

      7437f7e9596eb54495c6595c6ac2f8f8410f84d4fdf3775b930ad6807ebcfbef

    • SHA512

      f360b2c2ede693cf919922e893e4b40530d7422038b603b0b493684e09d9ca5e8f11a0bf95e1cc7dfb498b8687100dbc4aab98b58e5b77b1ecc9806f84e1dee1

    • SSDEEP

      3072:cJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JWa//2uFrSc:hfYOX+wTScR/Xzku9LVwhuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks