General

  • Target

    011f2da81548ee213aa655476f320d784d50197305fa6dc0d90819d38b3eff3bN

  • Size

    180KB

  • Sample

    240918-wfb7qavfkr

  • MD5

    a94bd502fb2b516bc02543463f06b160

  • SHA1

    43e631be000771a685e44e2fa6f82a7cac882796

  • SHA256

    011f2da81548ee213aa655476f320d784d50197305fa6dc0d90819d38b3eff3b

  • SHA512

    1dc0754ad799decbc4097a34cf3bcd8889fe9d23370e4afaca1d5280e25ffe2d7df9c67dcfbe1f72f3f8257f460914ce0a296564ec2884c455e8cb8fb9d4b085

  • SSDEEP

    3072:/3U+o/fwAUfM8+NmXhjlAZ+SWlxT5H3zipQIoZeErkxUNBG0:fUZYxfM8+YXfq+SOxTxjipQjzk3

Malware Config

Extracted

Family

dridex

Botnet

111

C2

94.126.8.2:443

81.2.235.131:1688

178.63.156.139:3388

rc4.plain
rc4.plain

Targets

    • Target

      011f2da81548ee213aa655476f320d784d50197305fa6dc0d90819d38b3eff3bN

    • Size

      180KB

    • MD5

      a94bd502fb2b516bc02543463f06b160

    • SHA1

      43e631be000771a685e44e2fa6f82a7cac882796

    • SHA256

      011f2da81548ee213aa655476f320d784d50197305fa6dc0d90819d38b3eff3b

    • SHA512

      1dc0754ad799decbc4097a34cf3bcd8889fe9d23370e4afaca1d5280e25ffe2d7df9c67dcfbe1f72f3f8257f460914ce0a296564ec2884c455e8cb8fb9d4b085

    • SSDEEP

      3072:/3U+o/fwAUfM8+NmXhjlAZ+SWlxT5H3zipQIoZeErkxUNBG0:fUZYxfM8+YXfq+SOxTxjipQjzk3

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks