General

  • Target

    e261ce766ef3a3b47a135b4b653f25af0114d0f5c5895bd75a6b1397575dde33

  • Size

    180KB

  • Sample

    240908-ppdzcawcpq

  • MD5

    c26b63f9606d44c8ab84781c6b30c102

  • SHA1

    273ebf871afdf9dfb387c979e25a94a75975d5f8

  • SHA256

    e261ce766ef3a3b47a135b4b653f25af0114d0f5c5895bd75a6b1397575dde33

  • SHA512

    c169c1e18d9a6e74f94470aacc4c27c381757b00484dc3a9360737db9cf62a63a6d9f39f7574332eb2617612b157217b8b6f9bb0442eb19f22874bc970c37531

  • SSDEEP

    3072:93U+o/fwAUfM8+NmXhjlAZ+SWlxT5H3zipQIoZeErkxUNBG0:dUZYxfM8+YXfq+SOxTxjipQjzk3

Malware Config

Extracted

Family

dridex

Botnet

111

C2

94.126.8.2:443

81.2.235.131:1688

178.63.156.139:3388

rc4.plain
rc4.plain

Targets

    • Target

      e261ce766ef3a3b47a135b4b653f25af0114d0f5c5895bd75a6b1397575dde33

    • Size

      180KB

    • MD5

      c26b63f9606d44c8ab84781c6b30c102

    • SHA1

      273ebf871afdf9dfb387c979e25a94a75975d5f8

    • SHA256

      e261ce766ef3a3b47a135b4b653f25af0114d0f5c5895bd75a6b1397575dde33

    • SHA512

      c169c1e18d9a6e74f94470aacc4c27c381757b00484dc3a9360737db9cf62a63a6d9f39f7574332eb2617612b157217b8b6f9bb0442eb19f22874bc970c37531

    • SSDEEP

      3072:93U+o/fwAUfM8+NmXhjlAZ+SWlxT5H3zipQIoZeErkxUNBG0:dUZYxfM8+YXfq+SOxTxjipQjzk3

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks