General

  • Target

    43645f78bd96eeccf6c9efbe61c95470N

  • Size

    236KB

  • Sample

    240911-k9ghrasfkk

  • MD5

    43645f78bd96eeccf6c9efbe61c95470

  • SHA1

    860d22dfd352f951eefdd8aef77f7d664756343d

  • SHA256

    d20890ab418000445edfe46d0372bde19f9de78a5096c62ad29a9718bb9ba4b3

  • SHA512

    ec378c16e7e0f5dd7833cbe3db459bc8bd8abcf6775cb565ee7c583bc781ffda49362010122f5aa50e39c0f2df2f94ef642a0dc52cb2f74de7853342b1f502ea

  • SSDEEP

    6144:z1G3WVIOY6Bdjehj+qudd96ou/6mv5wdC:z1GmSafShjYdd96z/6cwdC

Malware Config

Extracted

Family

dridex

Botnet

111

C2

52.73.70.149:443

8.4.9.152:3786

185.246.87.202:3098

50.116.111.64:5353

rc4.plain
rc4.plain

Targets

    • Target

      43645f78bd96eeccf6c9efbe61c95470N

    • Size

      236KB

    • MD5

      43645f78bd96eeccf6c9efbe61c95470

    • SHA1

      860d22dfd352f951eefdd8aef77f7d664756343d

    • SHA256

      d20890ab418000445edfe46d0372bde19f9de78a5096c62ad29a9718bb9ba4b3

    • SHA512

      ec378c16e7e0f5dd7833cbe3db459bc8bd8abcf6775cb565ee7c583bc781ffda49362010122f5aa50e39c0f2df2f94ef642a0dc52cb2f74de7853342b1f502ea

    • SSDEEP

      6144:z1G3WVIOY6Bdjehj+qudd96ou/6mv5wdC:z1GmSafShjYdd96z/6cwdC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks