General

  • Target

    e4633204f27f311b9b8f9dda739d48d61c5b6077096fda79053b763ffd2b3a9f.exe

  • Size

    366KB

  • Sample

    250119-x8fw2ssqcn

  • MD5

    15f661d4b029158cdd2d592541f4c712

  • SHA1

    b663f7d759762a7954a6cb7935938f746bfcc3a8

  • SHA256

    e4633204f27f311b9b8f9dda739d48d61c5b6077096fda79053b763ffd2b3a9f

  • SHA512

    0de73638262a4edc5b58612f6995b0d895c4f0dc6a6509ffa811ed607954c41572d791f5dd34297dc5f28807494c8b34b14d65dd789322cfce2d5883672846dd

  • SSDEEP

    6144:wuUfyIrWsUujF7DpzIhDyacsEv6P8xWWz1:tUaIrWPupJIheacsb0z1

Malware Config

Extracted

Family

dridex

Botnet

10111

C2

87.98.218.33:443

54.38.143.246:691

92.38.128.47:3389

159.65.79.173:3886

rc4.plain
rc4.plain

Targets

    • Target

      e4633204f27f311b9b8f9dda739d48d61c5b6077096fda79053b763ffd2b3a9f.exe

    • Size

      366KB

    • MD5

      15f661d4b029158cdd2d592541f4c712

    • SHA1

      b663f7d759762a7954a6cb7935938f746bfcc3a8

    • SHA256

      e4633204f27f311b9b8f9dda739d48d61c5b6077096fda79053b763ffd2b3a9f

    • SHA512

      0de73638262a4edc5b58612f6995b0d895c4f0dc6a6509ffa811ed607954c41572d791f5dd34297dc5f28807494c8b34b14d65dd789322cfce2d5883672846dd

    • SSDEEP

      6144:wuUfyIrWsUujF7DpzIhDyacsEv6P8xWWz1:tUaIrWPupJIheacsb0z1

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

MITRE ATT&CK Enterprise v15

Tasks