General

  • Target

    61259bcd7169a04add08c19cf4ae33a276f50f28653b94eee9f72235b8e39ab6

  • Size

    180KB

  • Sample

    240914-3hmvkatard

  • MD5

    c4c3be621d6a72aa5c407014c6962a7e

  • SHA1

    169dd24235dfd7e7076fadfc84a41dcae139e09e

  • SHA256

    61259bcd7169a04add08c19cf4ae33a276f50f28653b94eee9f72235b8e39ab6

  • SHA512

    3c01769f5680c781889e038d9112d00846a06454240e27f249a3430b90d6b387d8f5dda43883c33214899f648a3cb266544d13fad8b070d3aa2aee3258c204c3

  • SSDEEP

    3072:x3U+o/fwAUfM8+NmXhjlAZ+SWlxT5H3zipQIoZeErkxUNBG0:ZUZYxfM8+YXfq+SOxTxjipQjzk3

Malware Config

Extracted

Family

dridex

Botnet

111

C2

94.126.8.2:443

81.2.235.131:1688

178.63.156.139:3388

rc4.plain
rc4.plain

Targets

    • Target

      61259bcd7169a04add08c19cf4ae33a276f50f28653b94eee9f72235b8e39ab6

    • Size

      180KB

    • MD5

      c4c3be621d6a72aa5c407014c6962a7e

    • SHA1

      169dd24235dfd7e7076fadfc84a41dcae139e09e

    • SHA256

      61259bcd7169a04add08c19cf4ae33a276f50f28653b94eee9f72235b8e39ab6

    • SHA512

      3c01769f5680c781889e038d9112d00846a06454240e27f249a3430b90d6b387d8f5dda43883c33214899f648a3cb266544d13fad8b070d3aa2aee3258c204c3

    • SSDEEP

      3072:x3U+o/fwAUfM8+NmXhjlAZ+SWlxT5H3zipQIoZeErkxUNBG0:ZUZYxfM8+YXfq+SOxTxjipQjzk3

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks