General

  • Target

    c95131572adc4115f3ecbe21f537afa0N

  • Size

    188KB

  • Sample

    240826-ak7crstdqh

  • MD5

    c95131572adc4115f3ecbe21f537afa0

  • SHA1

    da0cf956f67aed2eabee6d32db828ea5c8ce6cd8

  • SHA256

    715b0799c3db5307a402611daafd191baabd2ba9d580f086fe42e20e5fed8e7c

  • SHA512

    ec1a366d2354e989f1be26da602d79c7b1d5aa4e18e41ba2258eebbb37e2fe927f61e89516f99b3c107b76d0a209a721baba0f548035842ad12282eb78823b6d

  • SSDEEP

    3072:aVQvaAHkST6gWMlS5bGoU7jAgjP4M1/cc7PbTp1CV9nEwivYUcRoYt:aVQCAESHWMObGsM1l7XTqnxZf

Malware Config

Extracted

Family

dridex

Botnet

111

C2

213.202.229.72:3074

85.25.144.36:4643

202.91.8.121:4643

107.175.87.150:3889

rc4.plain
rc4.plain

Targets

    • Target

      c95131572adc4115f3ecbe21f537afa0N

    • Size

      188KB

    • MD5

      c95131572adc4115f3ecbe21f537afa0

    • SHA1

      da0cf956f67aed2eabee6d32db828ea5c8ce6cd8

    • SHA256

      715b0799c3db5307a402611daafd191baabd2ba9d580f086fe42e20e5fed8e7c

    • SHA512

      ec1a366d2354e989f1be26da602d79c7b1d5aa4e18e41ba2258eebbb37e2fe927f61e89516f99b3c107b76d0a209a721baba0f548035842ad12282eb78823b6d

    • SSDEEP

      3072:aVQvaAHkST6gWMlS5bGoU7jAgjP4M1/cc7PbTp1CV9nEwivYUcRoYt:aVQCAESHWMObGsM1l7XTqnxZf

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks