General

  • Target

    7524d5d5f94f325145520a4f2a56fcb5b6da92d9f87a547570aa3fc9bc856de3N

  • Size

    184KB

  • Sample

    240930-k8nwfa1hng

  • MD5

    7fe8bab35a8cbce139e3eb406b919b10

  • SHA1

    d3e6fd2289cc807f9dd1b96b7550a0986041bbbb

  • SHA256

    7524d5d5f94f325145520a4f2a56fcb5b6da92d9f87a547570aa3fc9bc856de3

  • SHA512

    a526a006277e4fb6beb86e9b1d587828266fa099e1f605310a2a5fa7fc4ca8176ba34f1be90a216472ef25e0990b889c6159bcdc69e3db9124bc5af1ab49e293

  • SSDEEP

    3072:HJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jxa//2uFrSc:0fYOX+wTScR/Xzku9LVwWuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      7524d5d5f94f325145520a4f2a56fcb5b6da92d9f87a547570aa3fc9bc856de3N

    • Size

      184KB

    • MD5

      7fe8bab35a8cbce139e3eb406b919b10

    • SHA1

      d3e6fd2289cc807f9dd1b96b7550a0986041bbbb

    • SHA256

      7524d5d5f94f325145520a4f2a56fcb5b6da92d9f87a547570aa3fc9bc856de3

    • SHA512

      a526a006277e4fb6beb86e9b1d587828266fa099e1f605310a2a5fa7fc4ca8176ba34f1be90a216472ef25e0990b889c6159bcdc69e3db9124bc5af1ab49e293

    • SSDEEP

      3072:HJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jxa//2uFrSc:0fYOX+wTScR/Xzku9LVwWuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks