General

  • Target

    2d21281534963609607d8492bd8c99141d655ced164480787db7c1eddf133d3dN

  • Size

    184KB

  • Sample

    241006-pwlb1ayelf

  • MD5

    e3c08e5825f079bcd21c02b9a6292380

  • SHA1

    a0b7be09f2137510b1aa6ace73ad66301790612a

  • SHA256

    2d21281534963609607d8492bd8c99141d655ced164480787db7c1eddf133d3d

  • SHA512

    6fa944957aec941eaa4d5bcbfb8be24932dd774623fcf4fa1f91ac1caa3e7de7aa1e9ec95726c1eff427c6a0850149d767ee7905faa8cc288949f7a22ad2a393

  • SSDEEP

    3072:u92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMT+rLA:u9NSMOEpQ1Q3ODAr+Vy

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      2d21281534963609607d8492bd8c99141d655ced164480787db7c1eddf133d3dN

    • Size

      184KB

    • MD5

      e3c08e5825f079bcd21c02b9a6292380

    • SHA1

      a0b7be09f2137510b1aa6ace73ad66301790612a

    • SHA256

      2d21281534963609607d8492bd8c99141d655ced164480787db7c1eddf133d3d

    • SHA512

      6fa944957aec941eaa4d5bcbfb8be24932dd774623fcf4fa1f91ac1caa3e7de7aa1e9ec95726c1eff427c6a0850149d767ee7905faa8cc288949f7a22ad2a393

    • SSDEEP

      3072:u92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMT+rLA:u9NSMOEpQ1Q3ODAr+Vy

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks