General

  • Target

    dba33b05ad73a13bef079ac964a26360N

  • Size

    176KB

  • Sample

    240911-th4cwazeqg

  • MD5

    dba33b05ad73a13bef079ac964a26360

  • SHA1

    42cd44db2c1e14fd14b177ba5f96eb80e93a262a

  • SHA256

    d98875796234e4fd463264950446b5cd96405fee434373b82eb7aaeed0d9b509

  • SHA512

    9e175dbba0b2423bfa4fe4e2f6bd188c5de0ec1aa7ffb3c54a416aed7618d48e3dd58072f13376c59329b8a36a6754a284c9943cb5a271ec4666aaa907c19a96

  • SSDEEP

    3072:ekuFv+1jFURSOOAONTxyUMN4lmg1sHednTLPfUTuIzMCIlpJDa9:ek+v+veSFrNT8V4sH0n/nGz8rJW

Malware Config

Extracted

Family

dridex

Botnet

111

C2

175.126.167.148:443

173.249.20.233:8043

162.241.204.233:4443

138.122.143.40:8043

rc4.plain
rc4.plain

Targets

    • Target

      dba33b05ad73a13bef079ac964a26360N

    • Size

      176KB

    • MD5

      dba33b05ad73a13bef079ac964a26360

    • SHA1

      42cd44db2c1e14fd14b177ba5f96eb80e93a262a

    • SHA256

      d98875796234e4fd463264950446b5cd96405fee434373b82eb7aaeed0d9b509

    • SHA512

      9e175dbba0b2423bfa4fe4e2f6bd188c5de0ec1aa7ffb3c54a416aed7618d48e3dd58072f13376c59329b8a36a6754a284c9943cb5a271ec4666aaa907c19a96

    • SSDEEP

      3072:ekuFv+1jFURSOOAONTxyUMN4lmg1sHednTLPfUTuIzMCIlpJDa9:ek+v+veSFrNT8V4sH0n/nGz8rJW

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks