General

  • Target

    82b32e73bb291bc2aac867ea88fb0f70N

  • Size

    277KB

  • Sample

    240909-zca22aydkq

  • MD5

    82b32e73bb291bc2aac867ea88fb0f70

  • SHA1

    70f9887b8a13904bcdde3baf71980cfec08b6fb8

  • SHA256

    5ee4e0b46516e1be27d492500fa8f3546065577292b00941c182d99f53e7e726

  • SHA512

    d94b4152bab1cc29ce9406e2c3553f8efa46df32dcad1220ccf803c85acfcdc0503a0fcf23924a8b14eddc55b3c9e2b43505c3725354ad2089baa318b6f4c71b

  • SSDEEP

    6144:azWxkOP4pOcDi6DOHPJo3d0KJ4z1WE9au/4pAClIXJO9wMkPjCIeh0mzJMEkCLP5:TSOP49e6yHPJo3d0KJ4z1WE9au/4pACP

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.76.1.150:443

50.249.212.98:23399

104.168.154.79:5007

rc4.plain
rc4.plain
rc4.plain
rc4.plain
rc4.plain

Targets

    • Target

      82b32e73bb291bc2aac867ea88fb0f70N

    • Size

      277KB

    • MD5

      82b32e73bb291bc2aac867ea88fb0f70

    • SHA1

      70f9887b8a13904bcdde3baf71980cfec08b6fb8

    • SHA256

      5ee4e0b46516e1be27d492500fa8f3546065577292b00941c182d99f53e7e726

    • SHA512

      d94b4152bab1cc29ce9406e2c3553f8efa46df32dcad1220ccf803c85acfcdc0503a0fcf23924a8b14eddc55b3c9e2b43505c3725354ad2089baa318b6f4c71b

    • SSDEEP

      6144:azWxkOP4pOcDi6DOHPJo3d0KJ4z1WE9au/4pAClIXJO9wMkPjCIeh0mzJMEkCLP5:TSOP49e6yHPJo3d0KJ4z1WE9au/4pACP

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks