General

  • Target

    a28c6a78253959118f81c4804e2cf570N

  • Size

    277KB

  • Sample

    240910-ppsshawbne

  • MD5

    a28c6a78253959118f81c4804e2cf570

  • SHA1

    7575498103924b1b50fb2888b6de69d92dc53ad3

  • SHA256

    da55ece50b5d86e3446d8134b152ad96c8afefb991163ca052b0d08a2b5037d6

  • SHA512

    41b1aa67ba071d535bda682acdab2172c0c76c76e104345715d602b41ca845996cc1f910dbaa8d00591fcaccb1f069e5f3c2f33322d6275a29c5b93249ea8dfc

  • SSDEEP

    6144:XzWxkOP4p2EesvcDi6DOHPJo3d0KJ4z1WE9au/4pAClIXJO9wMkPjCIeh0mzJMEl:aSOP47es0e6yHPJo3d0KJ4z1WE9au/4L

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.76.1.150:443

50.249.212.98:23399

104.168.154.79:5007

rc4.plain
rc4.plain

Targets

    • Target

      a28c6a78253959118f81c4804e2cf570N

    • Size

      277KB

    • MD5

      a28c6a78253959118f81c4804e2cf570

    • SHA1

      7575498103924b1b50fb2888b6de69d92dc53ad3

    • SHA256

      da55ece50b5d86e3446d8134b152ad96c8afefb991163ca052b0d08a2b5037d6

    • SHA512

      41b1aa67ba071d535bda682acdab2172c0c76c76e104345715d602b41ca845996cc1f910dbaa8d00591fcaccb1f069e5f3c2f33322d6275a29c5b93249ea8dfc

    • SSDEEP

      6144:XzWxkOP4p2EesvcDi6DOHPJo3d0KJ4z1WE9au/4pAClIXJO9wMkPjCIeh0mzJMEl:aSOP47es0e6yHPJo3d0KJ4z1WE9au/4L

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks