General

  • Target

    3116e879207fdfa9bbfb8cd7891c04b0N.exe

  • Size

    177KB

  • Sample

    240825-lyarhaxhpc

  • MD5

    3116e879207fdfa9bbfb8cd7891c04b0

  • SHA1

    5c2c060e99dde92d843a7ffe133a9c96b0965a1f

  • SHA256

    1dde2511d16d5e5f71908857f3604a66201407dc06354a66cfa8914cfdfd19eb

  • SHA512

    f3c41d3169cdb687239d2745eecf164a827b81825c32d9e2dd644bbd86f99fc06848ce108c683760efb26812587ecf5f6578915ef9eac7e43bacaaf4e439ff75

  • SSDEEP

    3072:1oNQK/z2dvUgKrjbeSUAjnERwDkCWptcvcb8qgAE0A2C8FQUVac8SUrKI6bl/g:+aIzLgKrjbvUAjERycp6c8qgATA2TQUl

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

45.79.91.89:9987

157.245.231.228:6051

rc4.plain
rc4.plain

Targets

    • Target

      3116e879207fdfa9bbfb8cd7891c04b0N.exe

    • Size

      177KB

    • MD5

      3116e879207fdfa9bbfb8cd7891c04b0

    • SHA1

      5c2c060e99dde92d843a7ffe133a9c96b0965a1f

    • SHA256

      1dde2511d16d5e5f71908857f3604a66201407dc06354a66cfa8914cfdfd19eb

    • SHA512

      f3c41d3169cdb687239d2745eecf164a827b81825c32d9e2dd644bbd86f99fc06848ce108c683760efb26812587ecf5f6578915ef9eac7e43bacaaf4e439ff75

    • SSDEEP

      3072:1oNQK/z2dvUgKrjbeSUAjnERwDkCWptcvcb8qgAE0A2C8FQUVac8SUrKI6bl/g:+aIzLgKrjbvUAjERycp6c8qgATA2TQUl

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks