General

  • Target

    2463353a7a53c965fd605740a8a4a4a0N

  • Size

    277KB

  • Sample

    240914-cgcp4a1emn

  • MD5

    2463353a7a53c965fd605740a8a4a4a0

  • SHA1

    c7c16673f6823ef664b799c6096a4fc8eb48f050

  • SHA256

    96c8bcc5ee3708ee98539e8e8d7711937b788e7b87610282e453971fec290961

  • SHA512

    42d96d7fcfbedd0750146e6b1b3374efab9b41a21407dfa3cde22ede4c5a2e682b13c8fc7556f9091543bd67f93f0f6e7ab19b3c1caa09564cf406b479b9d954

  • SSDEEP

    6144:GzWxkOP4p2EesvcDi6DOHPJo3d0KJ4z1WE9au/4pAClIXJO9wMkPjCIeh0mzJMEl:nSOP47es0e6yHPJo3d0KJ4z1WE9au/4L

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.76.1.150:443

50.249.212.98:23399

104.168.154.79:5007

rc4.plain
rc4.plain

Targets

    • Target

      2463353a7a53c965fd605740a8a4a4a0N

    • Size

      277KB

    • MD5

      2463353a7a53c965fd605740a8a4a4a0

    • SHA1

      c7c16673f6823ef664b799c6096a4fc8eb48f050

    • SHA256

      96c8bcc5ee3708ee98539e8e8d7711937b788e7b87610282e453971fec290961

    • SHA512

      42d96d7fcfbedd0750146e6b1b3374efab9b41a21407dfa3cde22ede4c5a2e682b13c8fc7556f9091543bd67f93f0f6e7ab19b3c1caa09564cf406b479b9d954

    • SSDEEP

      6144:GzWxkOP4p2EesvcDi6DOHPJo3d0KJ4z1WE9au/4pAClIXJO9wMkPjCIeh0mzJMEl:nSOP47es0e6yHPJo3d0KJ4z1WE9au/4L

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks