General

  • Target

    17e6720b3b9f96d4fb7e856208adc8f4b545608a7b09c8f23b0caef48fa091f6N.exe

  • Size

    366KB

  • Sample

    250120-zgmlmayjcs

  • MD5

    87eabc7694abacf221f6e4db1d8ce9e0

  • SHA1

    97f6349acceb8febb29359578868cb34b5700f0f

  • SHA256

    17e6720b3b9f96d4fb7e856208adc8f4b545608a7b09c8f23b0caef48fa091f6

  • SHA512

    eb40b547becd91257728f7d88c44f6b5282561c22087e7070c331eee0f5e971dd5c55f016bf5b79d6d5930b0674844584c6412b01eeb8339557bbf48db5462c8

  • SSDEEP

    6144:wuUfyIrWsUujF7DpzIhDyacsEv6P8xWWzv:tUaIrWPupJIheacsb0zv

Malware Config

Extracted

Family

dridex

Botnet

10111

C2

87.98.218.33:443

54.38.143.246:691

92.38.128.47:3389

159.65.79.173:3886

rc4.plain
rc4.plain

Targets

    • Target

      17e6720b3b9f96d4fb7e856208adc8f4b545608a7b09c8f23b0caef48fa091f6N.exe

    • Size

      366KB

    • MD5

      87eabc7694abacf221f6e4db1d8ce9e0

    • SHA1

      97f6349acceb8febb29359578868cb34b5700f0f

    • SHA256

      17e6720b3b9f96d4fb7e856208adc8f4b545608a7b09c8f23b0caef48fa091f6

    • SHA512

      eb40b547becd91257728f7d88c44f6b5282561c22087e7070c331eee0f5e971dd5c55f016bf5b79d6d5930b0674844584c6412b01eeb8339557bbf48db5462c8

    • SSDEEP

      6144:wuUfyIrWsUujF7DpzIhDyacsEv6P8xWWzv:tUaIrWPupJIheacsb0zv

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

MITRE ATT&CK Enterprise v15

Tasks