General

  • Target

    ee7a67ce8f1eab06b65bc673ce972850N

  • Size

    236KB

  • Sample

    240909-meh47ssgqk

  • MD5

    ee7a67ce8f1eab06b65bc673ce972850

  • SHA1

    d5568c3de188fc05fade3c9c365c29d1073c8037

  • SHA256

    a51025008a8afb02b895aa4103a30e1caa1fe4c0fec22d4d2033692f88aeeacf

  • SHA512

    7e8f0c48f697c715279ef55e519aea38f5e04f2846e3ccf5ac8d43c11ed41811605ad719e1976d09bb50b90dcee55ee4a032cba99fa21c24b94d297966d91287

  • SSDEEP

    6144:V1G3WVIOY6Bdjehj+qudd96ou/6mv5wdC:V1GmSafShjYdd96z/6cwdC

Malware Config

Extracted

Family

dridex

Botnet

111

C2

52.73.70.149:443

8.4.9.152:3786

185.246.87.202:3098

50.116.111.64:5353

rc4.plain
rc4.plain

Targets

    • Target

      ee7a67ce8f1eab06b65bc673ce972850N

    • Size

      236KB

    • MD5

      ee7a67ce8f1eab06b65bc673ce972850

    • SHA1

      d5568c3de188fc05fade3c9c365c29d1073c8037

    • SHA256

      a51025008a8afb02b895aa4103a30e1caa1fe4c0fec22d4d2033692f88aeeacf

    • SHA512

      7e8f0c48f697c715279ef55e519aea38f5e04f2846e3ccf5ac8d43c11ed41811605ad719e1976d09bb50b90dcee55ee4a032cba99fa21c24b94d297966d91287

    • SSDEEP

      6144:V1G3WVIOY6Bdjehj+qudd96ou/6mv5wdC:V1GmSafShjYdd96z/6cwdC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks