General

  • Target

    327c6bfdeb6804541a992cc888c62c5d657efa2ba151ba86f351ba37ee3aca0c

  • Size

    170KB

  • Sample

    241231-zw6caa1qgr

  • MD5

    d7bba5d8fdac23be1972574a0413f140

  • SHA1

    9f12756695c7514c4c4a74de295f8abe07c84696

  • SHA256

    327c6bfdeb6804541a992cc888c62c5d657efa2ba151ba86f351ba37ee3aca0c

  • SHA512

    bf1b5a1d4ea2cf32035cb1c4415aedb1433f1de196146d71399458e536b7640a7c47c8611e113464c7b143bbbf1261d22c0786c29cdd7ea6de37fa0f860f397a

  • SSDEEP

    3072:rV/jTmL3X6TLhgZBxbvRS1ebSi75S5NNZ4n+whXVM9MWdo8erj:rV/jTe38LiI4Oi75izyn+4lm

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

210.65.244.187:443

162.241.41.92:2303

46.231.204.10:8172

185.183.159.100:4125

rc4.plain
rc4.plain

Targets

    • Target

      327c6bfdeb6804541a992cc888c62c5d657efa2ba151ba86f351ba37ee3aca0c

    • Size

      170KB

    • MD5

      d7bba5d8fdac23be1972574a0413f140

    • SHA1

      9f12756695c7514c4c4a74de295f8abe07c84696

    • SHA256

      327c6bfdeb6804541a992cc888c62c5d657efa2ba151ba86f351ba37ee3aca0c

    • SHA512

      bf1b5a1d4ea2cf32035cb1c4415aedb1433f1de196146d71399458e536b7640a7c47c8611e113464c7b143bbbf1261d22c0786c29cdd7ea6de37fa0f860f397a

    • SSDEEP

      3072:rV/jTmL3X6TLhgZBxbvRS1ebSi75S5NNZ4n+whXVM9MWdo8erj:rV/jTe38LiI4Oi75izyn+4lm

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks