General

  • Target

    6bd5865a4b7b68cf7b1cf50bf10d1370N

  • Size

    196KB

  • Sample

    240911-ygqslsyhql

  • MD5

    6bd5865a4b7b68cf7b1cf50bf10d1370

  • SHA1

    5672800f47ca0f3098e3d2e53306a21c7c26617b

  • SHA256

    b957fc581fbbf6f26318cc0a7d6c724c4e5239c5546db78a70869eee43c7249a

  • SHA512

    b598e91f76320f943baab47a2fd6852c96ba6279f9cb0eaeb5d0087a4853d2ffa152da181b97e94a5e990e854d9f2746442f3c2c91a47995e90ac740cbd333a4

  • SSDEEP

    3072:OuCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJe:izWxkOP4p2EesvcDi6DOHPJt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.76.1.150:443

50.249.212.98:23399

104.168.154.79:5007

rc4.plain
rc4.plain

Targets

    • Target

      6bd5865a4b7b68cf7b1cf50bf10d1370N

    • Size

      196KB

    • MD5

      6bd5865a4b7b68cf7b1cf50bf10d1370

    • SHA1

      5672800f47ca0f3098e3d2e53306a21c7c26617b

    • SHA256

      b957fc581fbbf6f26318cc0a7d6c724c4e5239c5546db78a70869eee43c7249a

    • SHA512

      b598e91f76320f943baab47a2fd6852c96ba6279f9cb0eaeb5d0087a4853d2ffa152da181b97e94a5e990e854d9f2746442f3c2c91a47995e90ac740cbd333a4

    • SSDEEP

      3072:OuCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJe:izWxkOP4p2EesvcDi6DOHPJt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks