General

  • Target

    dd8412e4b7176887557fa52d8e851e2c373130bfed0da6c8eb267979ddc796a2

  • Size

    180KB

  • Sample

    240908-v8bwzsydnp

  • MD5

    7749e0ff61a8bef3dec048998e838ede

  • SHA1

    998fe754710b0aa0deb9729bfb2be1d0e3010243

  • SHA256

    dd8412e4b7176887557fa52d8e851e2c373130bfed0da6c8eb267979ddc796a2

  • SHA512

    f60d5dcfe25b8b17c78b8cad19044fbdf6cdd1da97eecbf9151d31c33d6999d92f5d9cb85619086e9b8b3e7646b56a799a471122b7f799a7e75000fba1dd5264

  • SSDEEP

    3072:x3U+o/fwAUfM8+NmXhjlAZ+SWlxT5H3zipQIoZeErkxUNBG0:ZUZYxfM8+YXfq+SOxTxjipQjzk3

Malware Config

Extracted

Family

dridex

Botnet

111

C2

94.126.8.2:443

81.2.235.131:1688

178.63.156.139:3388

rc4.plain
rc4.plain

Targets

    • Target

      dd8412e4b7176887557fa52d8e851e2c373130bfed0da6c8eb267979ddc796a2

    • Size

      180KB

    • MD5

      7749e0ff61a8bef3dec048998e838ede

    • SHA1

      998fe754710b0aa0deb9729bfb2be1d0e3010243

    • SHA256

      dd8412e4b7176887557fa52d8e851e2c373130bfed0da6c8eb267979ddc796a2

    • SHA512

      f60d5dcfe25b8b17c78b8cad19044fbdf6cdd1da97eecbf9151d31c33d6999d92f5d9cb85619086e9b8b3e7646b56a799a471122b7f799a7e75000fba1dd5264

    • SSDEEP

      3072:x3U+o/fwAUfM8+NmXhjlAZ+SWlxT5H3zipQIoZeErkxUNBG0:ZUZYxfM8+YXfq+SOxTxjipQjzk3

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks