General

  • Target

    83c1e53b16b87a658ee652ae559c902fb16a94bb2715b0312165bb090a9ea3de

  • Size

    180KB

  • Sample

    240914-wf3dxaxdlf

  • MD5

    9d7da4504d7879636e9e2aedd2d5a763

  • SHA1

    1696ff6a3a51d4a48ca64759a00f8e6385f83334

  • SHA256

    83c1e53b16b87a658ee652ae559c902fb16a94bb2715b0312165bb090a9ea3de

  • SHA512

    0fd6bfa0b83cad077d723f425fe3d76f9518ba55e9c63b54cfdabc2e7942244bc015e6f577987444688932a8dff2be87ec529a22e63471394c4653aa12f80eca

  • SSDEEP

    3072:m3U+o/fwAUfM8+NmXhjlAZ+SWlxT5H3zipQIoZeErkxUNBG0:iUZYxfM8+YXfq+SOxTxjipQjzk3

Malware Config

Extracted

Family

dridex

Botnet

111

C2

94.126.8.2:443

81.2.235.131:1688

178.63.156.139:3388

rc4.plain
rc4.plain

Targets

    • Target

      83c1e53b16b87a658ee652ae559c902fb16a94bb2715b0312165bb090a9ea3de

    • Size

      180KB

    • MD5

      9d7da4504d7879636e9e2aedd2d5a763

    • SHA1

      1696ff6a3a51d4a48ca64759a00f8e6385f83334

    • SHA256

      83c1e53b16b87a658ee652ae559c902fb16a94bb2715b0312165bb090a9ea3de

    • SHA512

      0fd6bfa0b83cad077d723f425fe3d76f9518ba55e9c63b54cfdabc2e7942244bc015e6f577987444688932a8dff2be87ec529a22e63471394c4653aa12f80eca

    • SSDEEP

      3072:m3U+o/fwAUfM8+NmXhjlAZ+SWlxT5H3zipQIoZeErkxUNBG0:iUZYxfM8+YXfq+SOxTxjipQjzk3

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks