General

  • Target

    94d3d30a637acd3d00d34501e7728178

  • Size

    184KB

  • Sample

    231222-p8pvysfaa5

  • MD5

    94d3d30a637acd3d00d34501e7728178

  • SHA1

    3a5a136c27958f16c24d4cf2af7277ea6f15b41f

  • SHA256

    1acff60c94d10cc26ca433ad5cfd98778e5f4db4b1a00be059341c5773e4d11b

  • SHA512

    7f1c1603abf31e8ebccd0232afa4b3aecea3dc159606c501773574aa192085521ba241a2f75dafd65558e64e3b1aa6762857191064b39fd3205066ea237c4473

  • SSDEEP

    3072:lgkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdgrdA4l:EPFkq6zOe5ilSanOQd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664

rc4.plain
rc4.plain

Targets

    • Target

      94d3d30a637acd3d00d34501e7728178

    • Size

      184KB

    • MD5

      94d3d30a637acd3d00d34501e7728178

    • SHA1

      3a5a136c27958f16c24d4cf2af7277ea6f15b41f

    • SHA256

      1acff60c94d10cc26ca433ad5cfd98778e5f4db4b1a00be059341c5773e4d11b

    • SHA512

      7f1c1603abf31e8ebccd0232afa4b3aecea3dc159606c501773574aa192085521ba241a2f75dafd65558e64e3b1aa6762857191064b39fd3205066ea237c4473

    • SSDEEP

      3072:lgkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdgrdA4l:EPFkq6zOe5ilSanOQd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks