General

  • Target

    f510f9e638d852bbbed878fab7679ec770cdf647c92c1c73653b457facf848c4N

  • Size

    184KB

  • Sample

    241106-fld1havelb

  • MD5

    4f79584a5c40828c361572fadc6f09a0

  • SHA1

    8409549544af811e0497aec19e2f375c627b418c

  • SHA256

    f510f9e638d852bbbed878fab7679ec770cdf647c92c1c73653b457facf848c4

  • SHA512

    63da05ae88f4efdf7afb31da4997f9b90a5d27694f07bcb92a526fec244a6d16e0d54a9fdf961b3ccb771fca1700d60026889d8e346e03f81be04640b1267e08

  • SSDEEP

    3072:U92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTQrLA:U9NSMOEpQ1Q3ODAr+V8

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      f510f9e638d852bbbed878fab7679ec770cdf647c92c1c73653b457facf848c4N

    • Size

      184KB

    • MD5

      4f79584a5c40828c361572fadc6f09a0

    • SHA1

      8409549544af811e0497aec19e2f375c627b418c

    • SHA256

      f510f9e638d852bbbed878fab7679ec770cdf647c92c1c73653b457facf848c4

    • SHA512

      63da05ae88f4efdf7afb31da4997f9b90a5d27694f07bcb92a526fec244a6d16e0d54a9fdf961b3ccb771fca1700d60026889d8e346e03f81be04640b1267e08

    • SSDEEP

      3072:U92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTQrLA:U9NSMOEpQ1Q3ODAr+V8

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks