General

  • Target

    885eb969becc93c091aac8d558a0d4e0N.exe

  • Size

    665KB

  • Sample

    240915-fa3jqawfkk

  • MD5

    885eb969becc93c091aac8d558a0d4e0

  • SHA1

    199b5e14020b37ccd4e52cc139f3f68a95cf68c2

  • SHA256

    b4ef52631bc1d0c6591d3a942458ec3ce932c8fa6755b25568a0cd95595288d5

  • SHA512

    da9a51fca7eba009da8ff464ee8d4a11bc2f69bf7827769cc00bcfca1bb2d23e45d649f2b9033f3c811dc7cc597b045f34e9d105a2a731be4f38a4bb6a2d5fff

  • SSDEEP

    12288:TSOP47es0e6yHPJfWqu4bx2zqTiZkWazdB:TBQes0e6yHak

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.76.1.150:443

50.249.212.98:23399

104.168.154.79:5007

rc4.plain
rc4.plain

Targets

    • Target

      885eb969becc93c091aac8d558a0d4e0N.exe

    • Size

      665KB

    • MD5

      885eb969becc93c091aac8d558a0d4e0

    • SHA1

      199b5e14020b37ccd4e52cc139f3f68a95cf68c2

    • SHA256

      b4ef52631bc1d0c6591d3a942458ec3ce932c8fa6755b25568a0cd95595288d5

    • SHA512

      da9a51fca7eba009da8ff464ee8d4a11bc2f69bf7827769cc00bcfca1bb2d23e45d649f2b9033f3c811dc7cc597b045f34e9d105a2a731be4f38a4bb6a2d5fff

    • SSDEEP

      12288:TSOP47es0e6yHPJfWqu4bx2zqTiZkWazdB:TBQes0e6yHak

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks