General

  • Target

    8598f454e26f52f8916275b951717a1384047744c45092492d8550c4af02e748

  • Size

    177KB

  • Sample

    240827-ats7havhjr

  • MD5

    a053326a49c7ad34edd6f56a6e20aa31

  • SHA1

    03a59cea56dd949a6fd40ea32de20e107ae1dca1

  • SHA256

    8598f454e26f52f8916275b951717a1384047744c45092492d8550c4af02e748

  • SHA512

    773151d62b8adfca52303bf582d8e5a71a95a77d88ea5c24955a650102432d7b92418d834ee9fd5627eaecebf820984bb36c8bed1a93e5f7f1d43ba2f627bd5e

  • SSDEEP

    3072:RoNQK/z2dvUgKrjbeSUAjnERwDkCWptcvcb8qgAE0A2C8FQUVac8SurKI6bl/g:SaIzLgKrjbvUAjERycp6c8qgATA2TQUr

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

45.79.91.89:9987

157.245.231.228:6051

rc4.plain
rc4.plain

Targets

    • Target

      8598f454e26f52f8916275b951717a1384047744c45092492d8550c4af02e748

    • Size

      177KB

    • MD5

      a053326a49c7ad34edd6f56a6e20aa31

    • SHA1

      03a59cea56dd949a6fd40ea32de20e107ae1dca1

    • SHA256

      8598f454e26f52f8916275b951717a1384047744c45092492d8550c4af02e748

    • SHA512

      773151d62b8adfca52303bf582d8e5a71a95a77d88ea5c24955a650102432d7b92418d834ee9fd5627eaecebf820984bb36c8bed1a93e5f7f1d43ba2f627bd5e

    • SSDEEP

      3072:RoNQK/z2dvUgKrjbeSUAjnERwDkCWptcvcb8qgAE0A2C8FQUVac8SurKI6bl/g:SaIzLgKrjbvUAjERycp6c8qgATA2TQUr

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks