General

  • Target

    0da11d93a8578a6585bcf37bf8f1006525e450218e5d4cdc372f90dc666fe853

  • Size

    665KB

  • Sample

    240911-xhtefsxcmg

  • MD5

    3f88cfbdc1c367333c38e8e9be03f8d1

  • SHA1

    d302dc665f6393974cb909ff28caa1e7ad7c42d3

  • SHA256

    0da11d93a8578a6585bcf37bf8f1006525e450218e5d4cdc372f90dc666fe853

  • SHA512

    2c8565b85702b44ab4650761a18ec1afb31d21c4ab920d4f5892f583fe32dc112e92387e48b254e4bca5b8d78f8bdfbe567c9cb8686fa925d671020a0e3de24f

  • SSDEEP

    6144:AzWxkOP4p2EesvcDi6DOHPJH940eJt0gdl:1SOP47es0e6yHPJHq0ot0cl

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.76.1.150:443

50.249.212.98:23399

104.168.154.79:5007

rc4.plain
rc4.plain

Targets

    • Target

      0da11d93a8578a6585bcf37bf8f1006525e450218e5d4cdc372f90dc666fe853

    • Size

      665KB

    • MD5

      3f88cfbdc1c367333c38e8e9be03f8d1

    • SHA1

      d302dc665f6393974cb909ff28caa1e7ad7c42d3

    • SHA256

      0da11d93a8578a6585bcf37bf8f1006525e450218e5d4cdc372f90dc666fe853

    • SHA512

      2c8565b85702b44ab4650761a18ec1afb31d21c4ab920d4f5892f583fe32dc112e92387e48b254e4bca5b8d78f8bdfbe567c9cb8686fa925d671020a0e3de24f

    • SSDEEP

      6144:AzWxkOP4p2EesvcDi6DOHPJH940eJt0gdl:1SOP47es0e6yHPJHq0ot0cl

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks