General

  • Target

    2142bc9f8c9e7fbb9a551d1cde5ac1d4bdcdcec25c3fc2dde63d4d093c5e2449N

  • Size

    184KB

  • Sample

    240919-qdexyazdkd

  • MD5

    d5716158d64dde82bfbebdc0a8f62500

  • SHA1

    2082bcedb9c59a73d4fe5d7598a61c0d579388d0

  • SHA256

    2142bc9f8c9e7fbb9a551d1cde5ac1d4bdcdcec25c3fc2dde63d4d093c5e2449

  • SHA512

    db82ee92d81c2778477209f9c042262c58a339f60c2ea562c61e959b76a1d92b0150d948294a72b300b697c431c226aa1457ce75baada705d9b939b17bd4cee7

  • SSDEEP

    3072:n92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTUrLA:n9NSMOEpQ1Q3ODAr+VA

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      2142bc9f8c9e7fbb9a551d1cde5ac1d4bdcdcec25c3fc2dde63d4d093c5e2449N

    • Size

      184KB

    • MD5

      d5716158d64dde82bfbebdc0a8f62500

    • SHA1

      2082bcedb9c59a73d4fe5d7598a61c0d579388d0

    • SHA256

      2142bc9f8c9e7fbb9a551d1cde5ac1d4bdcdcec25c3fc2dde63d4d093c5e2449

    • SHA512

      db82ee92d81c2778477209f9c042262c58a339f60c2ea562c61e959b76a1d92b0150d948294a72b300b697c431c226aa1457ce75baada705d9b939b17bd4cee7

    • SSDEEP

      3072:n92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTUrLA:n9NSMOEpQ1Q3ODAr+VA

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks