General

  • Target

    e0c15389a1916b84897596a6070da1c0N.exe

  • Size

    188KB

  • Sample

    240905-sdy2xstfpb

  • MD5

    e0c15389a1916b84897596a6070da1c0

  • SHA1

    b7b010b2614e5537eaa929ee86efa61e4fa28613

  • SHA256

    a1b349e7e22cedb8c4f9d68078b34a3281a535c9cbfec9223bd0ffa2c413e567

  • SHA512

    46ffc874c050f0220ad93a0cc4a227c17eaca2cfb611788d3114619d8fa922ca081bc6d260d776599c372a30c7b4eff72737a2daef3b3feefb17f2978310d8e6

  • SSDEEP

    3072:/teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzg9qM:nq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      e0c15389a1916b84897596a6070da1c0N.exe

    • Size

      188KB

    • MD5

      e0c15389a1916b84897596a6070da1c0

    • SHA1

      b7b010b2614e5537eaa929ee86efa61e4fa28613

    • SHA256

      a1b349e7e22cedb8c4f9d68078b34a3281a535c9cbfec9223bd0ffa2c413e567

    • SHA512

      46ffc874c050f0220ad93a0cc4a227c17eaca2cfb611788d3114619d8fa922ca081bc6d260d776599c372a30c7b4eff72737a2daef3b3feefb17f2978310d8e6

    • SSDEEP

      3072:/teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzg9qM:nq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks