General

  • Target

    c9e88a616529532688de111fc820e7f0N

  • Size

    188KB

  • Sample

    240826-ayz6lswfmj

  • MD5

    c9e88a616529532688de111fc820e7f0

  • SHA1

    05797d548c61604e503a1201a4c5e8fc61960103

  • SHA256

    46d8fe4261130c8a575bfaca562b5a3f095cb3cc608be107444f3827a6a24336

  • SHA512

    5cb3818d9069188a2d71d255b89f510258e47632cb45d44dfd7fe249bab40e2f540053f6cc4c97faa6c57de048ddff79769b8527c765efdea0bacef09c1ddbbe

  • SSDEEP

    3072:MVQvaAHkST6gWMlS5bGoU7jAgjP4M1/cc7PbTp1CV9nEwivYUcRoYt:MVQCAESHWMObGsM1l7XTqnxZf

Malware Config

Extracted

Family

dridex

Botnet

111

C2

213.202.229.72:3074

85.25.144.36:4643

202.91.8.121:4643

107.175.87.150:3889

rc4.plain
rc4.plain

Targets

    • Target

      c9e88a616529532688de111fc820e7f0N

    • Size

      188KB

    • MD5

      c9e88a616529532688de111fc820e7f0

    • SHA1

      05797d548c61604e503a1201a4c5e8fc61960103

    • SHA256

      46d8fe4261130c8a575bfaca562b5a3f095cb3cc608be107444f3827a6a24336

    • SHA512

      5cb3818d9069188a2d71d255b89f510258e47632cb45d44dfd7fe249bab40e2f540053f6cc4c97faa6c57de048ddff79769b8527c765efdea0bacef09c1ddbbe

    • SSDEEP

      3072:MVQvaAHkST6gWMlS5bGoU7jAgjP4M1/cc7PbTp1CV9nEwivYUcRoYt:MVQCAESHWMObGsM1l7XTqnxZf

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks