General

  • Target

    2fa3173934788cdecff5cb5ffad36e2ed485c8b935ed7b0f4c74a0356a782ad5

  • Size

    180KB

  • Sample

    241001-xjj76syelf

  • MD5

    fc612a771e015608d5dda06aa4335bd3

  • SHA1

    2dacb96c9f5cb3955ace7aa155a8f11b9fb37e19

  • SHA256

    2fa3173934788cdecff5cb5ffad36e2ed485c8b935ed7b0f4c74a0356a782ad5

  • SHA512

    3723f3bfcf4ca439ed90b8adaa117986311ca123ad95f733a2f11d945d0e16e584e16b55892cb4c4865060196faf66ac1f821f8bd840f025c20340a5ceb7a056

  • SSDEEP

    3072:e3U+o/fwAUfM8+NmXhjlAZ+SWlxT5H3zipQIoZeErkxUNBG0:qUZYxfM8+YXfq+SOxTxjipQjzk3

Malware Config

Extracted

Family

dridex

Botnet

111

C2

94.126.8.2:443

81.2.235.131:1688

178.63.156.139:3388

rc4.plain
rc4.plain

Targets

    • Target

      2fa3173934788cdecff5cb5ffad36e2ed485c8b935ed7b0f4c74a0356a782ad5

    • Size

      180KB

    • MD5

      fc612a771e015608d5dda06aa4335bd3

    • SHA1

      2dacb96c9f5cb3955ace7aa155a8f11b9fb37e19

    • SHA256

      2fa3173934788cdecff5cb5ffad36e2ed485c8b935ed7b0f4c74a0356a782ad5

    • SHA512

      3723f3bfcf4ca439ed90b8adaa117986311ca123ad95f733a2f11d945d0e16e584e16b55892cb4c4865060196faf66ac1f821f8bd840f025c20340a5ceb7a056

    • SSDEEP

      3072:e3U+o/fwAUfM8+NmXhjlAZ+SWlxT5H3zipQIoZeErkxUNBG0:qUZYxfM8+YXfq+SOxTxjipQjzk3

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks