General

  • Target

    d7f05859795e1751a829a6faafd89eafd9a182c31fc523132d60c8dec61d5f3b

  • Size

    184KB

  • Sample

    241221-we54eavmfs

  • MD5

    3634c82e466e1af3c861f7d6ce1a1922

  • SHA1

    be11664872c230952f34d9d28364b2c76126fa43

  • SHA256

    d7f05859795e1751a829a6faafd89eafd9a182c31fc523132d60c8dec61d5f3b

  • SHA512

    2d76767d44dbb9f73c2b5e3f309f29b3697d8a30ba1003801e79519453dab833a35b149f588800bc092ecf245f162c15fa21632b0c9f13ed3d99f3cb7a1e31f7

  • SSDEEP

    3072:QiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoilzoxss7:QiLVCIT4WK2z1W+CUHZj4Skq/eaoIoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      d7f05859795e1751a829a6faafd89eafd9a182c31fc523132d60c8dec61d5f3b

    • Size

      184KB

    • MD5

      3634c82e466e1af3c861f7d6ce1a1922

    • SHA1

      be11664872c230952f34d9d28364b2c76126fa43

    • SHA256

      d7f05859795e1751a829a6faafd89eafd9a182c31fc523132d60c8dec61d5f3b

    • SHA512

      2d76767d44dbb9f73c2b5e3f309f29b3697d8a30ba1003801e79519453dab833a35b149f588800bc092ecf245f162c15fa21632b0c9f13ed3d99f3cb7a1e31f7

    • SSDEEP

      3072:QiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoilzoxss7:QiLVCIT4WK2z1W+CUHZj4Skq/eaoIoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks