General

  • Target

    766bfc8b566f3ee0e607f9f4800a70d0N

  • Size

    274KB

  • Sample

    240910-cwxzkstgqg

  • MD5

    766bfc8b566f3ee0e607f9f4800a70d0

  • SHA1

    ab3ea0b76904657e9db2578573e8193aa7f55096

  • SHA256

    489682f9c9fc987aa2eb3ba3815f389b71f0de96ff8b2b204fd0cca213b732a4

  • SHA512

    e42a59ebecd91daaeda67ee0cd9673bbe3b1788c4e4f1abc1abbf1e9048b9a13781782cae0f8268c64b7fcdc699749bf8bc2d63ce4ea5656ddc0e5132fc8f45e

  • SSDEEP

    3072:kuCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJijaPdMj:4zWxkOP4p2EesvcDi6DOHPJVjaPdM+Ul

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.76.1.150:443

50.249.212.98:23399

104.168.154.79:5007

rc4.plain
rc4.plain

Targets

    • Target

      766bfc8b566f3ee0e607f9f4800a70d0N

    • Size

      274KB

    • MD5

      766bfc8b566f3ee0e607f9f4800a70d0

    • SHA1

      ab3ea0b76904657e9db2578573e8193aa7f55096

    • SHA256

      489682f9c9fc987aa2eb3ba3815f389b71f0de96ff8b2b204fd0cca213b732a4

    • SHA512

      e42a59ebecd91daaeda67ee0cd9673bbe3b1788c4e4f1abc1abbf1e9048b9a13781782cae0f8268c64b7fcdc699749bf8bc2d63ce4ea5656ddc0e5132fc8f45e

    • SSDEEP

      3072:kuCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJijaPdMj:4zWxkOP4p2EesvcDi6DOHPJVjaPdM+Ul

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks