General

  • Target

    232a3a6d4551622a0d9c16e13b222360N

  • Size

    176KB

  • Sample

    240908-fl152axhml

  • MD5

    232a3a6d4551622a0d9c16e13b222360

  • SHA1

    26e35570ddae83ccf0b8529b210bb166d1eac9fd

  • SHA256

    3fbc35ba56bf87c89cae60eb2d23a26559e4e3357d6eb3c38e8242791d40b7d9

  • SHA512

    f094e90a94cd2c38e9bbdc1a55a5c095955c8eb3f9897a089ec66b0027bc78c4ea2ef621b6e64eca7ff7ec87964e292231bcf8a58129d5dec2bd86d8f2ff013b

  • SSDEEP

    3072:gkuFv+1jFURSOOAONTxyUMN4lmg1sHednTLPfUTuIzMCIlpJDa9:gk+v+veSFrNT8V4sH0n/nGz8rJW

Malware Config

Extracted

Family

dridex

Botnet

111

C2

175.126.167.148:443

173.249.20.233:8043

162.241.204.233:4443

138.122.143.40:8043

rc4.plain
rc4.plain

Targets

    • Target

      232a3a6d4551622a0d9c16e13b222360N

    • Size

      176KB

    • MD5

      232a3a6d4551622a0d9c16e13b222360

    • SHA1

      26e35570ddae83ccf0b8529b210bb166d1eac9fd

    • SHA256

      3fbc35ba56bf87c89cae60eb2d23a26559e4e3357d6eb3c38e8242791d40b7d9

    • SHA512

      f094e90a94cd2c38e9bbdc1a55a5c095955c8eb3f9897a089ec66b0027bc78c4ea2ef621b6e64eca7ff7ec87964e292231bcf8a58129d5dec2bd86d8f2ff013b

    • SSDEEP

      3072:gkuFv+1jFURSOOAONTxyUMN4lmg1sHednTLPfUTuIzMCIlpJDa9:gk+v+veSFrNT8V4sH0n/nGz8rJW

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks