General

  • Target

    09eb2af57116cff66afde43fbd144900N

  • Size

    236KB

  • Sample

    240910-dvex2svalp

  • MD5

    09eb2af57116cff66afde43fbd144900

  • SHA1

    bcd208a11fa73fec4517de64f9623022e86d2503

  • SHA256

    45cf92f1576250558cac45a9041b80f8e5637b3f7edafb61577598946b1c01c3

  • SHA512

    9e90ae451b92209fe2262a28540d1f8417c6a383766388fc7bb7f87fb95f72be8aa92fb94682b7938932dd689c1b563afcc18aa0be9e5c84271ebaf80e252958

  • SSDEEP

    6144:H1G3WVIOY6Bdjehj+qudd96ou/6mv5wdC:H1GmSafShjYdd96z/6cwdC

Malware Config

Extracted

Family

dridex

Botnet

111

C2

52.73.70.149:443

8.4.9.152:3786

185.246.87.202:3098

50.116.111.64:5353

rc4.plain
rc4.plain

Targets

    • Target

      09eb2af57116cff66afde43fbd144900N

    • Size

      236KB

    • MD5

      09eb2af57116cff66afde43fbd144900

    • SHA1

      bcd208a11fa73fec4517de64f9623022e86d2503

    • SHA256

      45cf92f1576250558cac45a9041b80f8e5637b3f7edafb61577598946b1c01c3

    • SHA512

      9e90ae451b92209fe2262a28540d1f8417c6a383766388fc7bb7f87fb95f72be8aa92fb94682b7938932dd689c1b563afcc18aa0be9e5c84271ebaf80e252958

    • SSDEEP

      6144:H1G3WVIOY6Bdjehj+qudd96ou/6mv5wdC:H1GmSafShjYdd96z/6cwdC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks