General

  • Target

    20d7e4cc2f0cb7ccb0952ef6268bcb80N

  • Size

    277KB

  • Sample

    240910-fh6aksygrh

  • MD5

    20d7e4cc2f0cb7ccb0952ef6268bcb80

  • SHA1

    f7e9464c812339ff160b3087508a1f161538e4da

  • SHA256

    9f8cf58c852b9448573df7275489d91824c2b16c1a4fb63d2c4f0a2114219ddc

  • SHA512

    128518bee5a6c4ccd9938655e4b9960659fb0a8bfafede35ef9a0e4dd4ed45a2024d0237293bb15875cdeccaea785f18403e2cb542a60d16eedc2342ae3e3c29

  • SSDEEP

    6144:RzWxkOP4p2EesvcDi6DOHPJo3d0KJ4z1WE9au/4pAClIXJO9wMkPjCIeh0mzJMEl:ASOP47es0e6yHPJo3d0KJ4z1WE9au/4L

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.76.1.150:443

50.249.212.98:23399

104.168.154.79:5007

rc4.plain
rc4.plain

Targets

    • Target

      20d7e4cc2f0cb7ccb0952ef6268bcb80N

    • Size

      277KB

    • MD5

      20d7e4cc2f0cb7ccb0952ef6268bcb80

    • SHA1

      f7e9464c812339ff160b3087508a1f161538e4da

    • SHA256

      9f8cf58c852b9448573df7275489d91824c2b16c1a4fb63d2c4f0a2114219ddc

    • SHA512

      128518bee5a6c4ccd9938655e4b9960659fb0a8bfafede35ef9a0e4dd4ed45a2024d0237293bb15875cdeccaea785f18403e2cb542a60d16eedc2342ae3e3c29

    • SSDEEP

      6144:RzWxkOP4p2EesvcDi6DOHPJo3d0KJ4z1WE9au/4pAClIXJO9wMkPjCIeh0mzJMEl:ASOP47es0e6yHPJo3d0KJ4z1WE9au/4L

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks