General

  • Target

    1a2f2b08645e45aea06a78a3ce574fd0N

  • Size

    277KB

  • Sample

    240910-fdmmnsxdlq

  • MD5

    1a2f2b08645e45aea06a78a3ce574fd0

  • SHA1

    a322127cef51bb24e9e7828cfdaab9e677ca0400

  • SHA256

    70091cc5ee9636e49e913c4e114327ab12ce2cdf7934ccc98ed1a847b4cc4383

  • SHA512

    07f0330fa3dcec5e659b66c30828fefbb89b9dfa8dcb930d3fec233866385d194ca125ccb122841cd41fe67a6ecab24d80d337d72863bfdf20d9280938e512ee

  • SSDEEP

    6144:AzWxkOP4p2EesvcDi6DOHPJo3d0KJ4z1WE9au/4pAClIXJO9wMkPjCIeh0mzJMEl:1SOP47es0e6yHPJo3d0KJ4z1WE9au/4L

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.76.1.150:443

50.249.212.98:23399

104.168.154.79:5007

rc4.plain
rc4.plain

Targets

    • Target

      1a2f2b08645e45aea06a78a3ce574fd0N

    • Size

      277KB

    • MD5

      1a2f2b08645e45aea06a78a3ce574fd0

    • SHA1

      a322127cef51bb24e9e7828cfdaab9e677ca0400

    • SHA256

      70091cc5ee9636e49e913c4e114327ab12ce2cdf7934ccc98ed1a847b4cc4383

    • SHA512

      07f0330fa3dcec5e659b66c30828fefbb89b9dfa8dcb930d3fec233866385d194ca125ccb122841cd41fe67a6ecab24d80d337d72863bfdf20d9280938e512ee

    • SSDEEP

      6144:AzWxkOP4p2EesvcDi6DOHPJo3d0KJ4z1WE9au/4pAClIXJO9wMkPjCIeh0mzJMEl:1SOP47es0e6yHPJo3d0KJ4z1WE9au/4L

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks