General

  • Target

    4fccd38f504290cf5c70e7336071a90a064303c7fdf5c17f7c38001768bce115.zip

  • Size

    157KB

  • Sample

    230310-m4vvaseg5z

  • MD5

    60e1019d0cb67763c3acebc510f2f6ed

  • SHA1

    50721f002182fc32786b3f9ecede6473ab8202a8

  • SHA256

    412a69a422b348ebf39cbea239d1d4aa0fb770ab86ed2f338b4f21e7a93eae32

  • SHA512

    23d33ab2e6c362acee188941638d506650708571aa88bb7086bc6b004de5897777ff32b1e082b2f401f21fa36f22da98bd15e6d604f37718486248f399f1db52

  • SSDEEP

    3072:2bcUnha+AnGoBADvv7x2ndTfIx2ZDg/YjJE4lo7zE4Wgo:2bG+ABWv12npqisoLo7zdo

Score
10/10

Malware Config

Extracted

Family

dridex

C2

198.61.168.254:443

51.255.165.160:3389

209.126.105.6:884

Targets

    • Target

      4fccd38f504290cf5c70e7336071a90a064303c7fdf5c17f7c38001768bce115.exe

    • Size

      241KB

    • MD5

      e614a69d706913376ab2bb20a703dcf5

    • SHA1

      3a83bb68be29e1f18fc9d328d952fd228abfae2a

    • SHA256

      4fccd38f504290cf5c70e7336071a90a064303c7fdf5c17f7c38001768bce115

    • SHA512

      dd22042b471b608b7a52d531d3b690d35cbe684333cd88c55709b6b562f81d3c02e866ad95fb4e6d62908005cd9e5ae01e88d3c86346ce0c2c156036b72b77ec

    • SSDEEP

      3072:KWiPOo14wwI606CzpJEPlp+K2b1WvAUQdk5m84D2KQdXtvkDqW0TrHbed2rT2pN8:KWdEj6rapJEPr11AXdQm84Dr0OOPSR4

    Score
    10/10
    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks