General

  • Target

    cce96e0322d0e90af86adc0b91090d20N

  • Size

    236KB

  • Sample

    240911-jnx3yazhrd

  • MD5

    cce96e0322d0e90af86adc0b91090d20

  • SHA1

    c3e31869b0145355ae7550540f9b02184d368994

  • SHA256

    7750d6879745ee95b08c7d64b119f754cd7c0678bc424cf49dc1b65608aa7538

  • SHA512

    6151e9f2597836accbc28497ae5780facbb8de62260b9cab10cde8a57ccc9b7fd8f39ea297a1d8d56d10a12a4eb7a74c185a13ebe5036c250f8eb12168b4e873

  • SSDEEP

    6144:L1G3WVIOY6Bdjehj+qudd96ou/6mv5wdC:L1GmSafShjYdd96z/6cwdC

Malware Config

Extracted

Family

dridex

Botnet

111

C2

52.73.70.149:443

8.4.9.152:3786

185.246.87.202:3098

50.116.111.64:5353

rc4.plain
rc4.plain

Targets

    • Target

      cce96e0322d0e90af86adc0b91090d20N

    • Size

      236KB

    • MD5

      cce96e0322d0e90af86adc0b91090d20

    • SHA1

      c3e31869b0145355ae7550540f9b02184d368994

    • SHA256

      7750d6879745ee95b08c7d64b119f754cd7c0678bc424cf49dc1b65608aa7538

    • SHA512

      6151e9f2597836accbc28497ae5780facbb8de62260b9cab10cde8a57ccc9b7fd8f39ea297a1d8d56d10a12a4eb7a74c185a13ebe5036c250f8eb12168b4e873

    • SSDEEP

      6144:L1G3WVIOY6Bdjehj+qudd96ou/6mv5wdC:L1GmSafShjYdd96z/6cwdC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks