General

  • Target

    1ec6e655995290d0fc5c03f49212e675

  • Size

    188KB

  • Sample

    231230-2mlmmaeacr

  • MD5

    1ec6e655995290d0fc5c03f49212e675

  • SHA1

    a6531dde3b47e5ab3b9b7c3c30229f2be6533d93

  • SHA256

    87dbfe79296c0a7624923678b6b35d466482f0d99831d8353a2897ba846b2438

  • SHA512

    4d996307648db12793b2a99a648025644bfff89533c3856f775ebf4b04476616eaea9b6c8060acedc2965f4c8d6e2e34b4ed344db7496029f1d9003b13ce85eb

  • SSDEEP

    3072:JA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAolo:JzIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      1ec6e655995290d0fc5c03f49212e675

    • Size

      188KB

    • MD5

      1ec6e655995290d0fc5c03f49212e675

    • SHA1

      a6531dde3b47e5ab3b9b7c3c30229f2be6533d93

    • SHA256

      87dbfe79296c0a7624923678b6b35d466482f0d99831d8353a2897ba846b2438

    • SHA512

      4d996307648db12793b2a99a648025644bfff89533c3856f775ebf4b04476616eaea9b6c8060acedc2965f4c8d6e2e34b4ed344db7496029f1d9003b13ce85eb

    • SSDEEP

      3072:JA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAolo:JzIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks