General

  • Target

    CmmCaDtyjdickpenis.bin

  • Size

    524KB

  • Sample

    230630-pzxjfacc75

  • MD5

    e8425731d24430d3eb25182dfc18200a

  • SHA1

    a24bb1158c01117b14646e83243308396230e2a8

  • SHA256

    b24c3ed00e59dbcff18037648cad503072b9e0d7a13f30d2bbfa9c466fdbee66

  • SHA512

    f5779b0eb78b69459153557e65f549562de985103a43dad0d0ce8a2c2ca165b9cffae113a216793d95be173f9a285dc06cbdd32ff42f850e59eb20209b8804df

  • SSDEEP

    6144:7KMImhktm7mnmvetmzK/kxwv4Zm7mREqZzdazdULd54f3X0kdVtL8faGAPlX:79hXAg5aX0CL8fI

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

104.36.167.47:443

188.40.48.93:4664

162.241.33.132:9217

217.160.5.104:593

rc4.plain
rc4.plain

Targets

    • Target

      CmmCaDtyjdickpenis.bin

    • Size

      524KB

    • MD5

      e8425731d24430d3eb25182dfc18200a

    • SHA1

      a24bb1158c01117b14646e83243308396230e2a8

    • SHA256

      b24c3ed00e59dbcff18037648cad503072b9e0d7a13f30d2bbfa9c466fdbee66

    • SHA512

      f5779b0eb78b69459153557e65f549562de985103a43dad0d0ce8a2c2ca165b9cffae113a216793d95be173f9a285dc06cbdd32ff42f850e59eb20209b8804df

    • SSDEEP

      6144:7KMImhktm7mnmvetmzK/kxwv4Zm7mREqZzdazdULd54f3X0kdVtL8faGAPlX:79hXAg5aX0CL8fI

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks