General

  • Target

    e4ee1ade0f1b488b5ed52927a03344a1d6f2e574f11bfb976ab2f5abd4973fae

  • Size

    180KB

  • Sample

    240826-ewpz3swdlj

  • MD5

    370e241c525f5d34157713153101a411

  • SHA1

    fc3fb52f6051b674af7245eeca9a760aa036fbb1

  • SHA256

    e4ee1ade0f1b488b5ed52927a03344a1d6f2e574f11bfb976ab2f5abd4973fae

  • SHA512

    6b249b238dc21a8edbf2ebdfcaf232483ec211b1cb4c021461630f448fea6787ed599a6cb3fa06484d1bc18de2268226c0fe5d13bbc662b95b757c4013413845

  • SSDEEP

    3072:Z3U+o/fwAUfM8+NmXhjlAZ+SWlxT5H3zipQIoZeErkxUNBG0:RUZYxfM8+YXfq+SOxTxjipQjzk3

Malware Config

Extracted

Family

dridex

Botnet

111

C2

94.126.8.2:443

81.2.235.131:1688

178.63.156.139:3388

rc4.plain
rc4.plain

Targets

    • Target

      e4ee1ade0f1b488b5ed52927a03344a1d6f2e574f11bfb976ab2f5abd4973fae

    • Size

      180KB

    • MD5

      370e241c525f5d34157713153101a411

    • SHA1

      fc3fb52f6051b674af7245eeca9a760aa036fbb1

    • SHA256

      e4ee1ade0f1b488b5ed52927a03344a1d6f2e574f11bfb976ab2f5abd4973fae

    • SHA512

      6b249b238dc21a8edbf2ebdfcaf232483ec211b1cb4c021461630f448fea6787ed599a6cb3fa06484d1bc18de2268226c0fe5d13bbc662b95b757c4013413845

    • SSDEEP

      3072:Z3U+o/fwAUfM8+NmXhjlAZ+SWlxT5H3zipQIoZeErkxUNBG0:RUZYxfM8+YXfq+SOxTxjipQjzk3

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks