General

  • Target

    bc4fa9cb6a6b349c6c4b975bf2f5785a063e3cc1ac6c8886f9bb00da5caaec76.exe

  • Size

    365KB

  • Sample

    250117-r2ykmasjgt

  • MD5

    37e25bdc32ec7a0698826c7c6a446825

  • SHA1

    ebfd86d8fed465078f874752468cb25767325c2a

  • SHA256

    bc4fa9cb6a6b349c6c4b975bf2f5785a063e3cc1ac6c8886f9bb00da5caaec76

  • SHA512

    b6894aa49caaabe0bea13f59964499022851d2c56be0bc5415eca396677bdbd14f3d9d25bcee96a4ba13daa0feca29cbaa784509cc7c05f30e6fd868962138fe

  • SSDEEP

    3072:BdOb5g2mc06HSamn/2AWbwvpS1IVrVOZHBvskLyAITytApFUKjbobZYy:yFRmc06yamHgIchvlWAI5pFVH8Zp

Malware Config

Extracted

Family

dridex

C2

94.130.66.61:691

192.232.207.243:8443

185.10.202.137:1443

88.217.172.79:3386

Targets

    • Target

      bc4fa9cb6a6b349c6c4b975bf2f5785a063e3cc1ac6c8886f9bb00da5caaec76.exe

    • Size

      365KB

    • MD5

      37e25bdc32ec7a0698826c7c6a446825

    • SHA1

      ebfd86d8fed465078f874752468cb25767325c2a

    • SHA256

      bc4fa9cb6a6b349c6c4b975bf2f5785a063e3cc1ac6c8886f9bb00da5caaec76

    • SHA512

      b6894aa49caaabe0bea13f59964499022851d2c56be0bc5415eca396677bdbd14f3d9d25bcee96a4ba13daa0feca29cbaa784509cc7c05f30e6fd868962138fe

    • SSDEEP

      3072:BdOb5g2mc06HSamn/2AWbwvpS1IVrVOZHBvskLyAITytApFUKjbobZYy:yFRmc06yamHgIchvlWAI5pFVH8Zp

    Score
    10/10
    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

MITRE ATT&CK Enterprise v15

Tasks