General

  • Target

    7d9114955023bef9f59408aa107282c0N

  • Size

    176KB

  • Sample

    240909-dd779syamr

  • MD5

    7d9114955023bef9f59408aa107282c0

  • SHA1

    b9bd79a246ec5b86e01dd70deb1901eb52691fe1

  • SHA256

    d3d4c763262f1799ed6488da4f11b1c33035ee03a43ae32463fe200a81d70b6b

  • SHA512

    fc0d4c98822417a851f78cacbcf32b25527707898ce574f31a114ae791570b9cff6147478ae069bd2a34c63445e03ce1249a8c66b5c505c1081762f86ed83947

  • SSDEEP

    3072:DkuFv+1jFURSOOAONTxyUMN4lmg1sHednTLPfUTuIzMCIlpJDa9:Dk+v+veSFrNT8V4sH0n/nGz8rJW

Malware Config

Extracted

Family

dridex

Botnet

111

C2

175.126.167.148:443

173.249.20.233:8043

162.241.204.233:4443

138.122.143.40:8043

rc4.plain
rc4.plain

Targets

    • Target

      7d9114955023bef9f59408aa107282c0N

    • Size

      176KB

    • MD5

      7d9114955023bef9f59408aa107282c0

    • SHA1

      b9bd79a246ec5b86e01dd70deb1901eb52691fe1

    • SHA256

      d3d4c763262f1799ed6488da4f11b1c33035ee03a43ae32463fe200a81d70b6b

    • SHA512

      fc0d4c98822417a851f78cacbcf32b25527707898ce574f31a114ae791570b9cff6147478ae069bd2a34c63445e03ce1249a8c66b5c505c1081762f86ed83947

    • SSDEEP

      3072:DkuFv+1jFURSOOAONTxyUMN4lmg1sHednTLPfUTuIzMCIlpJDa9:Dk+v+veSFrNT8V4sH0n/nGz8rJW

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks