General

  • Target

    9bcaa600aafd13e9a24cbdb2ca683600N.exe

  • Size

    277KB

  • Sample

    240909-abpflasbjj

  • MD5

    9bcaa600aafd13e9a24cbdb2ca683600

  • SHA1

    4581dc6fd8a3a54198c8774581cdc962cb5d284c

  • SHA256

    df0a546f3c1fbfe17aa4312ad6b559d3bf2df71b4a49a2bff45f3109099979cd

  • SHA512

    ccf7eff9df4350c266bccc2bc6ad379aa69cef35a058a5badc1d8e31aaae889c0061fa2023c063e78de3842642f14df2cea77d2ea33a46a3a35e1991532b4e9a

  • SSDEEP

    6144:3zWxkOP4p2EesvcDi6DOHPJo3d0KJ4z1WE9au/4pAClIXJO9wMkPjCIeh0mzJMEl:6SOP47es0e6yHPJo3d0KJ4z1WE9au/4L

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.76.1.150:443

50.249.212.98:23399

104.168.154.79:5007

rc4.plain
rc4.plain

Targets

    • Target

      9bcaa600aafd13e9a24cbdb2ca683600N.exe

    • Size

      277KB

    • MD5

      9bcaa600aafd13e9a24cbdb2ca683600

    • SHA1

      4581dc6fd8a3a54198c8774581cdc962cb5d284c

    • SHA256

      df0a546f3c1fbfe17aa4312ad6b559d3bf2df71b4a49a2bff45f3109099979cd

    • SHA512

      ccf7eff9df4350c266bccc2bc6ad379aa69cef35a058a5badc1d8e31aaae889c0061fa2023c063e78de3842642f14df2cea77d2ea33a46a3a35e1991532b4e9a

    • SSDEEP

      6144:3zWxkOP4p2EesvcDi6DOHPJo3d0KJ4z1WE9au/4pAClIXJO9wMkPjCIeh0mzJMEl:6SOP47es0e6yHPJo3d0KJ4z1WE9au/4L

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks