General

  • Target

    7717009ebeea11a25c05f4a6e56bbdc3da45a2a851d2fd5581825ed01eeb9268

  • Size

    184KB

  • Sample

    241221-v831gavkgz

  • MD5

    70471fe84bb83bc3a9ba98d707087375

  • SHA1

    655a6f97e4d9e6d676716c97aecbfc9dc2e1901e

  • SHA256

    7717009ebeea11a25c05f4a6e56bbdc3da45a2a851d2fd5581825ed01eeb9268

  • SHA512

    e015b64ec8d95e2644f06531b204334b667f8d8d7c7770cbbb931fbceaa68bb1231e642b7aebcf8c8abfcd1efc8f8ab7188798babe52b4fa4c47b89a3de6c252

  • SSDEEP

    3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao6lzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaoQoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      7717009ebeea11a25c05f4a6e56bbdc3da45a2a851d2fd5581825ed01eeb9268

    • Size

      184KB

    • MD5

      70471fe84bb83bc3a9ba98d707087375

    • SHA1

      655a6f97e4d9e6d676716c97aecbfc9dc2e1901e

    • SHA256

      7717009ebeea11a25c05f4a6e56bbdc3da45a2a851d2fd5581825ed01eeb9268

    • SHA512

      e015b64ec8d95e2644f06531b204334b667f8d8d7c7770cbbb931fbceaa68bb1231e642b7aebcf8c8abfcd1efc8f8ab7188798babe52b4fa4c47b89a3de6c252

    • SSDEEP

      3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao6lzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaoQoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks