General

  • Target

    91770946f3933b1c3f4542cab378c644

  • Size

    184KB

  • Sample

    231222-p5cq8aeae3

  • MD5

    91770946f3933b1c3f4542cab378c644

  • SHA1

    dd40ee7355721139281465618e785aa578fee0c3

  • SHA256

    6d97499afee1c718bc43e55ea9488109b64d80e819646397e821ab6ae1420a4d

  • SHA512

    ee194f469540998dbf49747e95dc19a64398d00f6e673341e95135f06e314dd3c548557cd55588d8e4b29b7c514bb9d69a45534b3f5c7ad56b400e7e96c9157e

  • SSDEEP

    3072:XgkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdgXdA4l:SPFkq6zOe5ilSanO8d

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664

rc4.plain
rc4.plain

Targets

    • Target

      91770946f3933b1c3f4542cab378c644

    • Size

      184KB

    • MD5

      91770946f3933b1c3f4542cab378c644

    • SHA1

      dd40ee7355721139281465618e785aa578fee0c3

    • SHA256

      6d97499afee1c718bc43e55ea9488109b64d80e819646397e821ab6ae1420a4d

    • SHA512

      ee194f469540998dbf49747e95dc19a64398d00f6e673341e95135f06e314dd3c548557cd55588d8e4b29b7c514bb9d69a45534b3f5c7ad56b400e7e96c9157e

    • SSDEEP

      3072:XgkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdgXdA4l:SPFkq6zOe5ilSanO8d

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks