General

  • Target

    97e7001fab8a032173dcd6504d693570N.exe

  • Size

    188KB

  • Sample

    240905-yyt7csyhqb

  • MD5

    97e7001fab8a032173dcd6504d693570

  • SHA1

    37ff7a9cd326de07d64afb039d073b47db9bed47

  • SHA256

    4eb8a4074f851b75de8354505ff3a96d2dd31b3e40687c0ae0e45434b39ede24

  • SHA512

    848c366211cb9a5af66a2617be0ae117dd920dd9d848f451bf7a57331fe27b0a45da96e9876bfdfac2f992fd3aee89e030832cdd75108f3dd5152a9ae3cb9131

  • SSDEEP

    3072:tteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzC9qM:Zq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      97e7001fab8a032173dcd6504d693570N.exe

    • Size

      188KB

    • MD5

      97e7001fab8a032173dcd6504d693570

    • SHA1

      37ff7a9cd326de07d64afb039d073b47db9bed47

    • SHA256

      4eb8a4074f851b75de8354505ff3a96d2dd31b3e40687c0ae0e45434b39ede24

    • SHA512

      848c366211cb9a5af66a2617be0ae117dd920dd9d848f451bf7a57331fe27b0a45da96e9876bfdfac2f992fd3aee89e030832cdd75108f3dd5152a9ae3cb9131

    • SSDEEP

      3072:tteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzC9qM:Zq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks