General

  • Target

    0b950fbccf962e603ae0d01ed734810a

  • Size

    188KB

  • Sample

    231230-cwmtlsbfhr

  • MD5

    0b950fbccf962e603ae0d01ed734810a

  • SHA1

    c36ad3da620feb978236aa5e5fc1f0fe88bce95f

  • SHA256

    62bb11221afbc42718bc0b44a1edef405aa25d7b6744bf84e0588bab47b22217

  • SHA512

    a037679b691234e08c9ab9164af4b8026fdf9b87d1ae2aa1ce0b75de7f841203240120e16173f6893d7ee3a9696cd4c5e52f77d2d85d2895c6ce484552922368

  • SSDEEP

    3072:GA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAojo:GzIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      0b950fbccf962e603ae0d01ed734810a

    • Size

      188KB

    • MD5

      0b950fbccf962e603ae0d01ed734810a

    • SHA1

      c36ad3da620feb978236aa5e5fc1f0fe88bce95f

    • SHA256

      62bb11221afbc42718bc0b44a1edef405aa25d7b6744bf84e0588bab47b22217

    • SHA512

      a037679b691234e08c9ab9164af4b8026fdf9b87d1ae2aa1ce0b75de7f841203240120e16173f6893d7ee3a9696cd4c5e52f77d2d85d2895c6ce484552922368

    • SSDEEP

      3072:GA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAojo:GzIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks