General

  • Target

    ae1cc8c9038158b9930e33faf43f87c0N

  • Size

    469KB

  • Sample

    240912-e85aja1gqa

  • MD5

    ae1cc8c9038158b9930e33faf43f87c0

  • SHA1

    ca0714a6772d3aab9c57d2c27ab6e77978673fd9

  • SHA256

    389f1b41092c5a92fdb6ad52e8c230594d557f58e4192f862fe83fc198a7bbab

  • SHA512

    12a83acef4aaba312a950c30d0da04d40285f1ff77ddb0933c59fa7db3c0ceca1aa3016bca5f98b32deed29743b1efac09a4ef54b7212f20494b780a60dce4b0

  • SSDEEP

    6144:kzWxkOP4p2EesvcDi6DOHPJXfQy1GzCSVs+W7T0:BSOP47es0e6yHPJXff1sCo40

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.76.1.150:443

50.249.212.98:23399

104.168.154.79:5007

rc4.plain
rc4.plain

Targets

    • Target

      ae1cc8c9038158b9930e33faf43f87c0N

    • Size

      469KB

    • MD5

      ae1cc8c9038158b9930e33faf43f87c0

    • SHA1

      ca0714a6772d3aab9c57d2c27ab6e77978673fd9

    • SHA256

      389f1b41092c5a92fdb6ad52e8c230594d557f58e4192f862fe83fc198a7bbab

    • SHA512

      12a83acef4aaba312a950c30d0da04d40285f1ff77ddb0933c59fa7db3c0ceca1aa3016bca5f98b32deed29743b1efac09a4ef54b7212f20494b780a60dce4b0

    • SSDEEP

      6144:kzWxkOP4p2EesvcDi6DOHPJXfQy1GzCSVs+W7T0:BSOP47es0e6yHPJXff1sCo40

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks