General

  • Target

    90d57659bb7479165315700011b8742b2b140df2e5bdbbdf026c4832ccb5218cN

  • Size

    188KB

  • Sample

    240917-tphprasbkd

  • MD5

    be2d1e4667ea3a687ba9fce507e84ad0

  • SHA1

    d096629c6a31fbea58f15c9b416bf4c8d5531c8a

  • SHA256

    90d57659bb7479165315700011b8742b2b140df2e5bdbbdf026c4832ccb5218c

  • SHA512

    4c172cd5c7bc6d18b2ff0ae46eba5a766789411535aaca84e1bba3f4700c4901f2eb7e7f4d966fd38348f04636c48edcb7a9085e6f86a288d02155f2f1b51627

  • SSDEEP

    3072:jteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz/9qM:Lq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      90d57659bb7479165315700011b8742b2b140df2e5bdbbdf026c4832ccb5218cN

    • Size

      188KB

    • MD5

      be2d1e4667ea3a687ba9fce507e84ad0

    • SHA1

      d096629c6a31fbea58f15c9b416bf4c8d5531c8a

    • SHA256

      90d57659bb7479165315700011b8742b2b140df2e5bdbbdf026c4832ccb5218c

    • SHA512

      4c172cd5c7bc6d18b2ff0ae46eba5a766789411535aaca84e1bba3f4700c4901f2eb7e7f4d966fd38348f04636c48edcb7a9085e6f86a288d02155f2f1b51627

    • SSDEEP

      3072:jteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz/9qM:Lq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks