General

  • Target

    3abb5ea990cdf80e0cb3cba2c9fa34e43fd07be51d505e1679ba500adb35fae3

  • Size

    180KB

  • Sample

    240914-wks12axbrl

  • MD5

    1b2c813e1ac11d2de48ccd86bce3e062

  • SHA1

    d602d483709d1f1bb150e763d51f8dbe8aca2e5d

  • SHA256

    3abb5ea990cdf80e0cb3cba2c9fa34e43fd07be51d505e1679ba500adb35fae3

  • SHA512

    0b854eff882f7525768bedc29e329516266d72d545afe47f82806d789ed7c758417e1d3631aa2f7be50573800e27fef175204e1d48f6bdb949388d41624d1e1e

  • SSDEEP

    3072:z3U+o/fwAUfM8+NmXhjlAZ+SWlxT5H3zipQIoZeErkxUNBG0:7UZYxfM8+YXfq+SOxTxjipQjzk3

Malware Config

Extracted

Family

dridex

Botnet

111

C2

94.126.8.2:443

81.2.235.131:1688

178.63.156.139:3388

rc4.plain
rc4.plain

Targets

    • Target

      3abb5ea990cdf80e0cb3cba2c9fa34e43fd07be51d505e1679ba500adb35fae3

    • Size

      180KB

    • MD5

      1b2c813e1ac11d2de48ccd86bce3e062

    • SHA1

      d602d483709d1f1bb150e763d51f8dbe8aca2e5d

    • SHA256

      3abb5ea990cdf80e0cb3cba2c9fa34e43fd07be51d505e1679ba500adb35fae3

    • SHA512

      0b854eff882f7525768bedc29e329516266d72d545afe47f82806d789ed7c758417e1d3631aa2f7be50573800e27fef175204e1d48f6bdb949388d41624d1e1e

    • SSDEEP

      3072:z3U+o/fwAUfM8+NmXhjlAZ+SWlxT5H3zipQIoZeErkxUNBG0:7UZYxfM8+YXfq+SOxTxjipQjzk3

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks