General

  • Target

    00cacd958cadf20d13a9382b392eca7d

  • Size

    188KB

  • Sample

    231229-xcezwacfbr

  • MD5

    00cacd958cadf20d13a9382b392eca7d

  • SHA1

    72256d6f61ba3df2e95bff9b8174fd31a65eabbb

  • SHA256

    fe9d7aa2c31f9313706f42a50dcbf11e394c6b3325696d99335a0ec6829b0ac4

  • SHA512

    e01a60e9f9cdd1ddf310d14bbb766baf88bf552d096163d5f0ec7a45c54afd62f9ad73a5ce26028abfd3858f802f526053bea7369b9ff3683b013ce9097019ea

  • SSDEEP

    3072:iH0uyjZqEpAK+Gf78TBdrXkTM5vhRg9Esf0DwvtyMpVnpA+z6tX8sxKViW57dU:iUua/Pv7YNhRIEZDeXVpAxtMsxK

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      00cacd958cadf20d13a9382b392eca7d

    • Size

      188KB

    • MD5

      00cacd958cadf20d13a9382b392eca7d

    • SHA1

      72256d6f61ba3df2e95bff9b8174fd31a65eabbb

    • SHA256

      fe9d7aa2c31f9313706f42a50dcbf11e394c6b3325696d99335a0ec6829b0ac4

    • SHA512

      e01a60e9f9cdd1ddf310d14bbb766baf88bf552d096163d5f0ec7a45c54afd62f9ad73a5ce26028abfd3858f802f526053bea7369b9ff3683b013ce9097019ea

    • SSDEEP

      3072:iH0uyjZqEpAK+Gf78TBdrXkTM5vhRg9Esf0DwvtyMpVnpA+z6tX8sxKViW57dU:iUua/Pv7YNhRIEZDeXVpAxtMsxK

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks