General

  • Target

    22b6aa8c118f850e14eb78efadd00ee0N

  • Size

    236KB

  • Sample

    240912-bkbfrstbmq

  • MD5

    22b6aa8c118f850e14eb78efadd00ee0

  • SHA1

    04ce345c2c15f458f5e9c0a86f72e5639c40e5ac

  • SHA256

    a6ea57cdb7ea0f0d7d073f2fe4ef53456734b97eaa0e35b8c5a0225e0aa582d0

  • SHA512

    e84d891b4e7c5bfc0edf9a774c1e035816e8649a18bf90c33fc7676d557ec49b622a2ffcc82b4f6b388ea91f2d61af168781f097fcc826296db38fa6b58acf49

  • SSDEEP

    6144:51G3WVIOY6Bdjehj+qudd96oud6mv5wdC:51GmSafShjYdd96zd6cwdC

Malware Config

Extracted

Family

dridex

Botnet

111

C2

52.73.70.149:443

8.4.9.152:3786

185.246.87.202:3098

50.116.111.64:5353

rc4.plain
rc4.plain

Targets

    • Target

      22b6aa8c118f850e14eb78efadd00ee0N

    • Size

      236KB

    • MD5

      22b6aa8c118f850e14eb78efadd00ee0

    • SHA1

      04ce345c2c15f458f5e9c0a86f72e5639c40e5ac

    • SHA256

      a6ea57cdb7ea0f0d7d073f2fe4ef53456734b97eaa0e35b8c5a0225e0aa582d0

    • SHA512

      e84d891b4e7c5bfc0edf9a774c1e035816e8649a18bf90c33fc7676d557ec49b622a2ffcc82b4f6b388ea91f2d61af168781f097fcc826296db38fa6b58acf49

    • SSDEEP

      6144:51G3WVIOY6Bdjehj+qudd96oud6mv5wdC:51GmSafShjYdd96zd6cwdC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks