General

  • Target

    03b04fc79b054d13f92a5f11bb7026e7

  • Size

    188KB

  • Sample

    231229-znymgageal

  • MD5

    03b04fc79b054d13f92a5f11bb7026e7

  • SHA1

    743c17c0413c8356f4fb9a903f0fc6ee1c847a82

  • SHA256

    b389ad4db46455018519452ec472d4d43dc86a571c3ccf9f5392c2c84a78aefb

  • SHA512

    44f49b7055383164d0c06ae1986ea490d6d7e64e9c7d958c693cd36ca2d5d1682d768e713e487c74f4996c09b44793f1bdcd6893bb370cad1b2fdaebc3a4755e

  • SSDEEP

    3072:YA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoQo:YzIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      03b04fc79b054d13f92a5f11bb7026e7

    • Size

      188KB

    • MD5

      03b04fc79b054d13f92a5f11bb7026e7

    • SHA1

      743c17c0413c8356f4fb9a903f0fc6ee1c847a82

    • SHA256

      b389ad4db46455018519452ec472d4d43dc86a571c3ccf9f5392c2c84a78aefb

    • SHA512

      44f49b7055383164d0c06ae1986ea490d6d7e64e9c7d958c693cd36ca2d5d1682d768e713e487c74f4996c09b44793f1bdcd6893bb370cad1b2fdaebc3a4755e

    • SSDEEP

      3072:YA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoQo:YzIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks