General

  • Target

    54427b496d5f36da0edd907342c06abb64f9767bd10ee46e969ee10a0eb684db

  • Size

    184KB

  • Sample

    241221-wkbfzsvnfx

  • MD5

    a015387c1dc2d51cef4fc03ca2cd08ac

  • SHA1

    e8d34c9705b02717d67c688a4918f6056a5c3a68

  • SHA256

    54427b496d5f36da0edd907342c06abb64f9767bd10ee46e969ee10a0eb684db

  • SHA512

    36a43657424fa6050252be3d661168096024529390a0c834cf2eb1de8528f2c01099a63fc1bcfeaf1cebf056b02a3c79cc1d215ab61e22843e825053aa5c8ca5

  • SSDEEP

    3072:OiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao7lzoxss7:OiLVCIT4WK2z1W+CUHZj4Skq/eaoBoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      54427b496d5f36da0edd907342c06abb64f9767bd10ee46e969ee10a0eb684db

    • Size

      184KB

    • MD5

      a015387c1dc2d51cef4fc03ca2cd08ac

    • SHA1

      e8d34c9705b02717d67c688a4918f6056a5c3a68

    • SHA256

      54427b496d5f36da0edd907342c06abb64f9767bd10ee46e969ee10a0eb684db

    • SHA512

      36a43657424fa6050252be3d661168096024529390a0c834cf2eb1de8528f2c01099a63fc1bcfeaf1cebf056b02a3c79cc1d215ab61e22843e825053aa5c8ca5

    • SSDEEP

      3072:OiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao7lzoxss7:OiLVCIT4WK2z1W+CUHZj4Skq/eaoBoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks