General

  • Target

    bb6790bf8befdb62e620e14ca1ffeb80N

  • Size

    180KB

  • Sample

    240827-d52vkasglk

  • MD5

    bb6790bf8befdb62e620e14ca1ffeb80

  • SHA1

    91cbdce8eba7fb47472ae5c9ed8e074d7d046679

  • SHA256

    7e3edee698983b5b83bf87d73439e74eeba95a2bd4b70a54c99a37a4e7253559

  • SHA512

    e50c65746b9888e5ea837e7c763cc1d3ffc407ec5e12f31cbb58b5a0996fb69d00cd9d4ffb29cc2e7f072a3bd030b65c2de662fd6508a3197758aea734c4e979

  • SSDEEP

    3072:13U+o/fwAUfM8+NmXhjlAZ+SWlxT5H3zipQIoZeErkxUNBG0:FUZYxfM8+YXfq+SOxTxjipQjzk3

Malware Config

Extracted

Family

dridex

Botnet

111

C2

94.126.8.2:443

81.2.235.131:1688

178.63.156.139:3388

rc4.plain
rc4.plain

Targets

    • Target

      bb6790bf8befdb62e620e14ca1ffeb80N

    • Size

      180KB

    • MD5

      bb6790bf8befdb62e620e14ca1ffeb80

    • SHA1

      91cbdce8eba7fb47472ae5c9ed8e074d7d046679

    • SHA256

      7e3edee698983b5b83bf87d73439e74eeba95a2bd4b70a54c99a37a4e7253559

    • SHA512

      e50c65746b9888e5ea837e7c763cc1d3ffc407ec5e12f31cbb58b5a0996fb69d00cd9d4ffb29cc2e7f072a3bd030b65c2de662fd6508a3197758aea734c4e979

    • SSDEEP

      3072:13U+o/fwAUfM8+NmXhjlAZ+SWlxT5H3zipQIoZeErkxUNBG0:FUZYxfM8+YXfq+SOxTxjipQjzk3

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks