General

  • Target

    5952a5a00c63f96e430c3f7752030fa67b0b3756deab4a69091336dd2a3f3da3

  • Size

    196KB

  • Sample

    240909-1sc21atgpf

  • MD5

    f1e033e546b2467e776c6653a3f6df11

  • SHA1

    bfb25ccd5c5a1f1d2a359af07337132933ddf14b

  • SHA256

    5952a5a00c63f96e430c3f7752030fa67b0b3756deab4a69091336dd2a3f3da3

  • SHA512

    095e8824b2e0f1e7bf76dcd23580f7c4c13bf4e57f94ff85055b232bca8e875f9e7e1eef9a1e445132d1bc3b216ccd92716c78ca1924d255d5ec2805dcb4e7c0

  • SSDEEP

    3072:huCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJI:NzWxkOP4p2EesvcDi6DOHPJH

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.76.1.150:443

50.249.212.98:23399

104.168.154.79:5007

rc4.plain
rc4.plain

Targets

    • Target

      5952a5a00c63f96e430c3f7752030fa67b0b3756deab4a69091336dd2a3f3da3

    • Size

      196KB

    • MD5

      f1e033e546b2467e776c6653a3f6df11

    • SHA1

      bfb25ccd5c5a1f1d2a359af07337132933ddf14b

    • SHA256

      5952a5a00c63f96e430c3f7752030fa67b0b3756deab4a69091336dd2a3f3da3

    • SHA512

      095e8824b2e0f1e7bf76dcd23580f7c4c13bf4e57f94ff85055b232bca8e875f9e7e1eef9a1e445132d1bc3b216ccd92716c78ca1924d255d5ec2805dcb4e7c0

    • SSDEEP

      3072:huCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJI:NzWxkOP4p2EesvcDi6DOHPJH

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks