General

  • Target

    3dced351d6eeb2f28d176705173e4350N

  • Size

    236KB

  • Sample

    240908-ad953sshlk

  • MD5

    3dced351d6eeb2f28d176705173e4350

  • SHA1

    894f3adb08bcd5bcb34c7f8b0d8fc097c588bc8c

  • SHA256

    2f4cb738bf0b1af47903ee3bb02f1eb94719bce5d83f4f7e3b4aae628ecac0d8

  • SHA512

    42e27c84790e99b8bb4303288e436151549864eb10859abda3825b4fd5f04238c806c92af2412f6133bfb41e8328dce70f0fd9bb0b7d3418874adcfccc9fd782

  • SSDEEP

    6144:61G3WVIOY6Bdjehj+qudd96ou/6mv5wdC:61GmSafShjYdd96z/6cwdC

Malware Config

Extracted

Family

dridex

Botnet

111

C2

52.73.70.149:443

8.4.9.152:3786

185.246.87.202:3098

50.116.111.64:5353

rc4.plain
rc4.plain

Targets

    • Target

      3dced351d6eeb2f28d176705173e4350N

    • Size

      236KB

    • MD5

      3dced351d6eeb2f28d176705173e4350

    • SHA1

      894f3adb08bcd5bcb34c7f8b0d8fc097c588bc8c

    • SHA256

      2f4cb738bf0b1af47903ee3bb02f1eb94719bce5d83f4f7e3b4aae628ecac0d8

    • SHA512

      42e27c84790e99b8bb4303288e436151549864eb10859abda3825b4fd5f04238c806c92af2412f6133bfb41e8328dce70f0fd9bb0b7d3418874adcfccc9fd782

    • SSDEEP

      6144:61G3WVIOY6Bdjehj+qudd96ou/6mv5wdC:61GmSafShjYdd96z/6cwdC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks