General

  • Target

    a54c010773c2fb877bbd73bf098574b2ff6eeddfa20cbc7b10febe37b7085b57

  • Size

    180KB

  • Sample

    240908-v9md4sydrj

  • MD5

    57b55208db5cdc35238207f1a6a78619

  • SHA1

    1e7d1b49134fa82e355fba22d663ace54324c2fb

  • SHA256

    a54c010773c2fb877bbd73bf098574b2ff6eeddfa20cbc7b10febe37b7085b57

  • SHA512

    c05ea66eddec0a6a846531971b63235b7f0f12f7b492c9b3038bbbba8b75019dbfba5e999cc147f42c719fd0a1795740ede0db9d09aab9604c15c921de370680

  • SSDEEP

    3072:w3U+o/fwAUfM8+NmXhjlAZ+SWlxT5H3zipQIoZeErkxUNBG0:EUZYxfM8+YXfq+SOxTxjipQjzk3

Malware Config

Extracted

Family

dridex

Botnet

111

C2

94.126.8.2:443

81.2.235.131:1688

178.63.156.139:3388

rc4.plain
rc4.plain

Targets

    • Target

      a54c010773c2fb877bbd73bf098574b2ff6eeddfa20cbc7b10febe37b7085b57

    • Size

      180KB

    • MD5

      57b55208db5cdc35238207f1a6a78619

    • SHA1

      1e7d1b49134fa82e355fba22d663ace54324c2fb

    • SHA256

      a54c010773c2fb877bbd73bf098574b2ff6eeddfa20cbc7b10febe37b7085b57

    • SHA512

      c05ea66eddec0a6a846531971b63235b7f0f12f7b492c9b3038bbbba8b75019dbfba5e999cc147f42c719fd0a1795740ede0db9d09aab9604c15c921de370680

    • SSDEEP

      3072:w3U+o/fwAUfM8+NmXhjlAZ+SWlxT5H3zipQIoZeErkxUNBG0:EUZYxfM8+YXfq+SOxTxjipQjzk3

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks