General

  • Target

    7c170c66fb4b348e8af692cbace73053370d340b75cafd0ead0a9cb514086cdaN

  • Size

    184KB

  • Sample

    241003-j4467atcjk

  • MD5

    5e361ff9008b59eb010fbb20e094bc70

  • SHA1

    7353caa31ae54d93e1fa50e4042a79775bd20a18

  • SHA256

    7c170c66fb4b348e8af692cbace73053370d340b75cafd0ead0a9cb514086cda

  • SHA512

    8ba1b6b4c8a4b68d0f84a7b3d61cdf6c72064ed9acdecec65be1f0b35965b6575b636e5e3d36248b29f22598b9d40f948773a857d401a386f56005acc0be68bd

  • SSDEEP

    3072:QJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JOa//2uFrSc:tfYOX+wTScR/Xzku9LVwFuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      7c170c66fb4b348e8af692cbace73053370d340b75cafd0ead0a9cb514086cdaN

    • Size

      184KB

    • MD5

      5e361ff9008b59eb010fbb20e094bc70

    • SHA1

      7353caa31ae54d93e1fa50e4042a79775bd20a18

    • SHA256

      7c170c66fb4b348e8af692cbace73053370d340b75cafd0ead0a9cb514086cda

    • SHA512

      8ba1b6b4c8a4b68d0f84a7b3d61cdf6c72064ed9acdecec65be1f0b35965b6575b636e5e3d36248b29f22598b9d40f948773a857d401a386f56005acc0be68bd

    • SSDEEP

      3072:QJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JOa//2uFrSc:tfYOX+wTScR/Xzku9LVwFuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks