General

  • Target

    b1300405ab6f20ee1d4c6ae22e0531085daecdee0f74a60588d8618d8998c197

  • Size

    180KB

  • Sample

    240826-cag18szelr

  • MD5

    15b001e30a90765a5e6a7583fed04f9d

  • SHA1

    a3e92cb1686ae5883b82b8338d04ccde78caa2fe

  • SHA256

    b1300405ab6f20ee1d4c6ae22e0531085daecdee0f74a60588d8618d8998c197

  • SHA512

    cc25ae583bb3295d2ddf9a1b4cbb3f12d4006ce93eadc52924bb36b6504002843ec77acc34144acf5def78d852b4b8e074af6ba31d7ee94ceb4fe9dbba1abf5a

  • SSDEEP

    3072:E3U+o/fwAUfM8+NmXhjlAZ+SWlxT5H3zipQIoZeErkxUNBG0:gUZYxfM8+YXfq+SOxTxjipQjzk3

Malware Config

Extracted

Family

dridex

Botnet

111

C2

94.126.8.2:443

81.2.235.131:1688

178.63.156.139:3388

rc4.plain
rc4.plain

Targets

    • Target

      b1300405ab6f20ee1d4c6ae22e0531085daecdee0f74a60588d8618d8998c197

    • Size

      180KB

    • MD5

      15b001e30a90765a5e6a7583fed04f9d

    • SHA1

      a3e92cb1686ae5883b82b8338d04ccde78caa2fe

    • SHA256

      b1300405ab6f20ee1d4c6ae22e0531085daecdee0f74a60588d8618d8998c197

    • SHA512

      cc25ae583bb3295d2ddf9a1b4cbb3f12d4006ce93eadc52924bb36b6504002843ec77acc34144acf5def78d852b4b8e074af6ba31d7ee94ceb4fe9dbba1abf5a

    • SSDEEP

      3072:E3U+o/fwAUfM8+NmXhjlAZ+SWlxT5H3zipQIoZeErkxUNBG0:gUZYxfM8+YXfq+SOxTxjipQjzk3

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks