General

  • Target

    51652c4dff0c5a6e310211fe4ac69560N.exe

  • Size

    188KB

  • Sample

    240904-qwy4ja1clm

  • MD5

    51652c4dff0c5a6e310211fe4ac69560

  • SHA1

    c901ee667dd8ef29aa60a290be6e4d31c3e12b33

  • SHA256

    f52a1ad35841d14c7c475f0c3d7b9c73ca9f94e426541d464c72bd6122d790cf

  • SHA512

    9617c767f602718187b9e6a51f050bd542a254d3b5ed83b4d74dc27fe47acce4a79ee988c6e00c0494a4f43722327e7d3734d9b9a3950bda38d9b4b91060cbe5

  • SSDEEP

    3072:UteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzr9qM:oq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      51652c4dff0c5a6e310211fe4ac69560N.exe

    • Size

      188KB

    • MD5

      51652c4dff0c5a6e310211fe4ac69560

    • SHA1

      c901ee667dd8ef29aa60a290be6e4d31c3e12b33

    • SHA256

      f52a1ad35841d14c7c475f0c3d7b9c73ca9f94e426541d464c72bd6122d790cf

    • SHA512

      9617c767f602718187b9e6a51f050bd542a254d3b5ed83b4d74dc27fe47acce4a79ee988c6e00c0494a4f43722327e7d3734d9b9a3950bda38d9b4b91060cbe5

    • SSDEEP

      3072:UteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzr9qM:oq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks