General

  • Target

    29da941b92960c2bbc154aefbc044250N

  • Size

    196KB

  • Sample

    240913-gfyy6axflh

  • MD5

    29da941b92960c2bbc154aefbc044250

  • SHA1

    fcce147ae93894b2edf1c99c5346d42c54be0352

  • SHA256

    bfa58a7da05ceeffd2f4c13285180282c5aaf034b2dba08bbee55998b2ed9e42

  • SHA512

    bb15310b6e2b6d2375c8b3aea27eb9f7a94671843f70a7065ebe756f3a29deaae8ebd9980a754af71bd71bbd6cfbfd6d13bd5df692259ca7c21a673316709b0e

  • SSDEEP

    3072:tuCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJrI:xzWxkOP4p2EesvcDi6DOHPJKI

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.76.1.150:443

50.249.212.98:23399

104.168.154.79:5007

rc4.plain
rc4.plain

Targets

    • Target

      29da941b92960c2bbc154aefbc044250N

    • Size

      196KB

    • MD5

      29da941b92960c2bbc154aefbc044250

    • SHA1

      fcce147ae93894b2edf1c99c5346d42c54be0352

    • SHA256

      bfa58a7da05ceeffd2f4c13285180282c5aaf034b2dba08bbee55998b2ed9e42

    • SHA512

      bb15310b6e2b6d2375c8b3aea27eb9f7a94671843f70a7065ebe756f3a29deaae8ebd9980a754af71bd71bbd6cfbfd6d13bd5df692259ca7c21a673316709b0e

    • SSDEEP

      3072:tuCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJrI:xzWxkOP4p2EesvcDi6DOHPJKI

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks