General

  • Target

    692c63688834bd9a775bff89589f9a70N

  • Size

    236KB

  • Sample

    240908-fdr76azajh

  • MD5

    692c63688834bd9a775bff89589f9a70

  • SHA1

    1b8da34da4f8601957194213aa562ac478c6e1e6

  • SHA256

    5fe3e9c868b6553da4c3cf2287f8343131652adce672f68fd921ebc56ddeb6e3

  • SHA512

    5bd0c6687a716f06454dc82c16bfb1b4a8f03209762a3018df3ebff663d3354921653d9d2b303945a492a74f3c7f1f799c01cf1e3f7e7a7210071d60364c5889

  • SSDEEP

    6144:B1G3WVIOY6Bdjehj+qudd96ou/6mv5wdC:B1GmSafShjYdd96z/6cwdC

Malware Config

Extracted

Family

dridex

Botnet

111

C2

52.73.70.149:443

8.4.9.152:3786

185.246.87.202:3098

50.116.111.64:5353

rc4.plain
rc4.plain

Targets

    • Target

      692c63688834bd9a775bff89589f9a70N

    • Size

      236KB

    • MD5

      692c63688834bd9a775bff89589f9a70

    • SHA1

      1b8da34da4f8601957194213aa562ac478c6e1e6

    • SHA256

      5fe3e9c868b6553da4c3cf2287f8343131652adce672f68fd921ebc56ddeb6e3

    • SHA512

      5bd0c6687a716f06454dc82c16bfb1b4a8f03209762a3018df3ebff663d3354921653d9d2b303945a492a74f3c7f1f799c01cf1e3f7e7a7210071d60364c5889

    • SSDEEP

      6144:B1G3WVIOY6Bdjehj+qudd96ou/6mv5wdC:B1GmSafShjYdd96z/6cwdC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks