General

  • Target

    83578c23bb82f36047853f72138a5440N

  • Size

    277KB

  • Sample

    240910-hs15qa1ejq

  • MD5

    83578c23bb82f36047853f72138a5440

  • SHA1

    d0575e0f4c6f6c035357f3c34e082b483b030f9a

  • SHA256

    39eb727ab633dded01ab8620c7c47e46e41c76ed5eb093e5299000a8236d99f0

  • SHA512

    dc3dede7ace4ed2f803d94b3414e59321b9f85d66599a1d92df20e5b9bcd31dc6d36f353422a8ab12851bb510149e542a65c057d757b65981ac3e6194b6ab63c

  • SSDEEP

    6144:RzWxkOP4p2EesvcDi6DOHPJo3d0KJ4z1WE9au/4pAClIXJO9wMkPjCIeh0mzJMEl:ASOP47es0e6yHPJo3d0KJ4z1WE9au/4L

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.76.1.150:443

50.249.212.98:23399

104.168.154.79:5007

rc4.plain
rc4.plain

Targets

    • Target

      83578c23bb82f36047853f72138a5440N

    • Size

      277KB

    • MD5

      83578c23bb82f36047853f72138a5440

    • SHA1

      d0575e0f4c6f6c035357f3c34e082b483b030f9a

    • SHA256

      39eb727ab633dded01ab8620c7c47e46e41c76ed5eb093e5299000a8236d99f0

    • SHA512

      dc3dede7ace4ed2f803d94b3414e59321b9f85d66599a1d92df20e5b9bcd31dc6d36f353422a8ab12851bb510149e542a65c057d757b65981ac3e6194b6ab63c

    • SSDEEP

      6144:RzWxkOP4p2EesvcDi6DOHPJo3d0KJ4z1WE9au/4pAClIXJO9wMkPjCIeh0mzJMEl:ASOP47es0e6yHPJo3d0KJ4z1WE9au/4L

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks