General

  • Target

    d3438a8bcc669555023c27a6eac21cfd

  • Size

    184KB

  • Sample

    231222-ska9fafdem

  • MD5

    d3438a8bcc669555023c27a6eac21cfd

  • SHA1

    37c2a5bff1ee8cea4254ec6e764149982998b199

  • SHA256

    e75810da791d76320294dc8d9ccf9bcbde97c28f4d8145171bdfef651ddbf46a

  • SHA512

    84d792dd14a37c6a58aca322c3e5865c2d9a65913af72c6ac59b6db306baf414909a188b5302ceee66bdec7fa1661ed5847d918b50b7498ed317dbc28bbb2a86

  • SSDEEP

    3072:2gkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdg6dA4l:nPFkq6zOe5ilSanOtd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664

rc4.plain
rc4.plain

Targets

    • Target

      d3438a8bcc669555023c27a6eac21cfd

    • Size

      184KB

    • MD5

      d3438a8bcc669555023c27a6eac21cfd

    • SHA1

      37c2a5bff1ee8cea4254ec6e764149982998b199

    • SHA256

      e75810da791d76320294dc8d9ccf9bcbde97c28f4d8145171bdfef651ddbf46a

    • SHA512

      84d792dd14a37c6a58aca322c3e5865c2d9a65913af72c6ac59b6db306baf414909a188b5302ceee66bdec7fa1661ed5847d918b50b7498ed317dbc28bbb2a86

    • SSDEEP

      3072:2gkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdg6dA4l:nPFkq6zOe5ilSanOtd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks