General

  • Target

    caf2a94650378520bae0a48a5959d83cf93c302893f345efd8a2ca1b579d63c1

  • Size

    180KB

  • Sample

    240908-nlzafawbmd

  • MD5

    1a2217c8f0da866c3afddd60c524e6fd

  • SHA1

    31796d095bf7fc4e8d75e3b60f629f4ae7bd0e06

  • SHA256

    caf2a94650378520bae0a48a5959d83cf93c302893f345efd8a2ca1b579d63c1

  • SHA512

    d598deec1a7bf54b1785dd0eb6a8fea5bf89d1b8a828d396fbf4d8de405860458fbf0a85a666db95c391b5896bb401e34aee1c446baddec1217079a434cfdffd

  • SSDEEP

    3072:k3U+o/fwAUfM8+NmXhjlAZ+SWlxT5H3zipQIoZeErkxUNBG0:AUZYxfM8+YXfq+SOxTxjipQjzk3

Malware Config

Extracted

Family

dridex

Botnet

111

C2

94.126.8.2:443

81.2.235.131:1688

178.63.156.139:3388

rc4.plain
rc4.plain

Targets

    • Target

      caf2a94650378520bae0a48a5959d83cf93c302893f345efd8a2ca1b579d63c1

    • Size

      180KB

    • MD5

      1a2217c8f0da866c3afddd60c524e6fd

    • SHA1

      31796d095bf7fc4e8d75e3b60f629f4ae7bd0e06

    • SHA256

      caf2a94650378520bae0a48a5959d83cf93c302893f345efd8a2ca1b579d63c1

    • SHA512

      d598deec1a7bf54b1785dd0eb6a8fea5bf89d1b8a828d396fbf4d8de405860458fbf0a85a666db95c391b5896bb401e34aee1c446baddec1217079a434cfdffd

    • SSDEEP

      3072:k3U+o/fwAUfM8+NmXhjlAZ+SWlxT5H3zipQIoZeErkxUNBG0:AUZYxfM8+YXfq+SOxTxjipQjzk3

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks