General

  • Target

    56d98ec7ea34509fd97cd2b1dca1f820N

  • Size

    180KB

  • Sample

    240909-pke1vaxdqm

  • MD5

    56d98ec7ea34509fd97cd2b1dca1f820

  • SHA1

    36216edc69df768ddb725e5c1e32d341e5b7915b

  • SHA256

    a5e6989fb2c80c1ba1c7533fe2d8938981e0fc53c1b07a7d30ef732ff3b7ead1

  • SHA512

    d0ab08dcd9270889be6039120fd25c6262aad4956318316dfa47301b6b5cce27e8cd7629196737f85baf6f684f31a4f1dc97b8b29efb4cc64db9b754aef5d88a

  • SSDEEP

    3072:W3U+o/fwAUfM8+NmXhjlAZ+SWlxT5H3zipQIoZeErkxUNBG0:SUZYxfM8+YXfq+SOxTxjipQjzk3

Malware Config

Extracted

Family

dridex

Botnet

111

C2

94.126.8.2:443

81.2.235.131:1688

178.63.156.139:3388

rc4.plain
rc4.plain

Targets

    • Target

      56d98ec7ea34509fd97cd2b1dca1f820N

    • Size

      180KB

    • MD5

      56d98ec7ea34509fd97cd2b1dca1f820

    • SHA1

      36216edc69df768ddb725e5c1e32d341e5b7915b

    • SHA256

      a5e6989fb2c80c1ba1c7533fe2d8938981e0fc53c1b07a7d30ef732ff3b7ead1

    • SHA512

      d0ab08dcd9270889be6039120fd25c6262aad4956318316dfa47301b6b5cce27e8cd7629196737f85baf6f684f31a4f1dc97b8b29efb4cc64db9b754aef5d88a

    • SSDEEP

      3072:W3U+o/fwAUfM8+NmXhjlAZ+SWlxT5H3zipQIoZeErkxUNBG0:SUZYxfM8+YXfq+SOxTxjipQjzk3

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks