General

  • Target

    789d63a24aafa9f7f77a89a01044d6b4df6c3a8927a9fa1a161f0363d6eb4b56

  • Size

    184KB

  • Sample

    241221-wembasvpdj

  • MD5

    17c7e92826390a25b71a7c28aa631605

  • SHA1

    ddff67f1a757fbf718586ef32dc29195f8608b6d

  • SHA256

    789d63a24aafa9f7f77a89a01044d6b4df6c3a8927a9fa1a161f0363d6eb4b56

  • SHA512

    e4590b90749e785328444f85dcf9d6af085d335aa4198868a0f90e334ab732ff6fb087fa57e46d438b8e77357f5876aff5f4286094f41a75f84ae92b78b9618e

  • SSDEEP

    3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaonlzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaoVoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      789d63a24aafa9f7f77a89a01044d6b4df6c3a8927a9fa1a161f0363d6eb4b56

    • Size

      184KB

    • MD5

      17c7e92826390a25b71a7c28aa631605

    • SHA1

      ddff67f1a757fbf718586ef32dc29195f8608b6d

    • SHA256

      789d63a24aafa9f7f77a89a01044d6b4df6c3a8927a9fa1a161f0363d6eb4b56

    • SHA512

      e4590b90749e785328444f85dcf9d6af085d335aa4198868a0f90e334ab732ff6fb087fa57e46d438b8e77357f5876aff5f4286094f41a75f84ae92b78b9618e

    • SSDEEP

      3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaonlzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaoVoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks