General

  • Target

    46be2d1fdd401794dfe06542ce76b1304c14514601a27b11b2146baa6457a2b4

  • Size

    188KB

  • Sample

    240902-z7kvqaxdnk

  • MD5

    8147419706ff2fffb70f06dcccbc7d0f

  • SHA1

    3bfac5349f0bec82b5e5da38f2c33441432d6b68

  • SHA256

    46be2d1fdd401794dfe06542ce76b1304c14514601a27b11b2146baa6457a2b4

  • SHA512

    434e406aa8bf102613915ec2e576d4e2223b94ba94d15f335dd768ce4dcd269f771468076afcb29e75a3cf587e322029298b8b9ff6aed99a83607d4b46eadaee

  • SSDEEP

    3072:SteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzn9qM:aq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      46be2d1fdd401794dfe06542ce76b1304c14514601a27b11b2146baa6457a2b4

    • Size

      188KB

    • MD5

      8147419706ff2fffb70f06dcccbc7d0f

    • SHA1

      3bfac5349f0bec82b5e5da38f2c33441432d6b68

    • SHA256

      46be2d1fdd401794dfe06542ce76b1304c14514601a27b11b2146baa6457a2b4

    • SHA512

      434e406aa8bf102613915ec2e576d4e2223b94ba94d15f335dd768ce4dcd269f771468076afcb29e75a3cf587e322029298b8b9ff6aed99a83607d4b46eadaee

    • SSDEEP

      3072:SteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzn9qM:aq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks