General

  • Target

    bb31444b4993685128b699cf9faa9fea28f5dd313a32d6b6a23279951ddfa1c2

  • Size

    179KB

  • Sample

    240909-cl3gbazald

  • MD5

    70bcb7daa6a534dc2e5c018c11866659

  • SHA1

    98bc42307e9a5229521a8df9f8fdbe689a9c79fc

  • SHA256

    bb31444b4993685128b699cf9faa9fea28f5dd313a32d6b6a23279951ddfa1c2

  • SHA512

    32b385cc9052e8effbfb8eaa701a963b5a88454d70c2835cc2c91d8b69accd2fead7db2100b8309ed040bdf570c660a4b3ed0d9bd07def0f0671faef9e724b49

  • SSDEEP

    3072:WuCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJw:KzWxkOP4p2EesvcDi6DOHPJn

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.76.1.150:443

50.249.212.98:23399

104.168.154.79:5007

rc4.plain
rc4.plain

Targets

    • Target

      bb31444b4993685128b699cf9faa9fea28f5dd313a32d6b6a23279951ddfa1c2

    • Size

      179KB

    • MD5

      70bcb7daa6a534dc2e5c018c11866659

    • SHA1

      98bc42307e9a5229521a8df9f8fdbe689a9c79fc

    • SHA256

      bb31444b4993685128b699cf9faa9fea28f5dd313a32d6b6a23279951ddfa1c2

    • SHA512

      32b385cc9052e8effbfb8eaa701a963b5a88454d70c2835cc2c91d8b69accd2fead7db2100b8309ed040bdf570c660a4b3ed0d9bd07def0f0671faef9e724b49

    • SSDEEP

      3072:WuCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJw:KzWxkOP4p2EesvcDi6DOHPJn

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks