General

  • Target

    7f4a3760ab73205b9f6ccd180dd168488a75f481ba031d3d9ff7427adac6a993

  • Size

    180KB

  • Sample

    240908-t17g9aydna

  • MD5

    620bd0050befed7c225f47c3f22f7f1d

  • SHA1

    628a071a3515e3e857264115865a4be0ee46dabb

  • SHA256

    7f4a3760ab73205b9f6ccd180dd168488a75f481ba031d3d9ff7427adac6a993

  • SHA512

    48c49e05621f0833e4990d6e435654e2299eac81760e78e732071c40d5485662f8901ddf3389fd04053b3f7b1a7e82481d7d36873894f814720983396b5f6d7e

  • SSDEEP

    3072:Y3U+o/fwAUfM8+NmXhjlAZ+SWlxT5H3zipQIoZeErkxUNBG0:cUZYxfM8+YXfq+SOxTxjipQjzk3

Malware Config

Extracted

Family

dridex

Botnet

111

C2

94.126.8.2:443

81.2.235.131:1688

178.63.156.139:3388

rc4.plain
rc4.plain

Targets

    • Target

      7f4a3760ab73205b9f6ccd180dd168488a75f481ba031d3d9ff7427adac6a993

    • Size

      180KB

    • MD5

      620bd0050befed7c225f47c3f22f7f1d

    • SHA1

      628a071a3515e3e857264115865a4be0ee46dabb

    • SHA256

      7f4a3760ab73205b9f6ccd180dd168488a75f481ba031d3d9ff7427adac6a993

    • SHA512

      48c49e05621f0833e4990d6e435654e2299eac81760e78e732071c40d5485662f8901ddf3389fd04053b3f7b1a7e82481d7d36873894f814720983396b5f6d7e

    • SSDEEP

      3072:Y3U+o/fwAUfM8+NmXhjlAZ+SWlxT5H3zipQIoZeErkxUNBG0:cUZYxfM8+YXfq+SOxTxjipQjzk3

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks