General

  • Target

    0febc30dc3431b2fe31897ca81519407

  • Size

    184KB

  • Sample

    231230-f3hp1sffh3

  • MD5

    0febc30dc3431b2fe31897ca81519407

  • SHA1

    629cafb779045a3eb75f856d34a98ace877ba31f

  • SHA256

    25d9668bfb2fcd151e0095c8b3e81c179d03f9490d27dc79965b857ddc137e42

  • SHA512

    046b35df6e5afb4b50a190d12f1b416bc1f58cbf81c8ad4b423380230e8305a18a94f2203d59c31dd73a84c88d52f335dc804622ae1c51c5f7f5196617e1a8a1

  • SSDEEP

    3072:Qhd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JKVQcY:Q3fOeIv54W6SFKfc9me9v9/JKV

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

51.79.50.122:443

222.124.142.67:10443

138.201.222.158:4664

rc4.plain
rc4.plain

Targets

    • Target

      0febc30dc3431b2fe31897ca81519407

    • Size

      184KB

    • MD5

      0febc30dc3431b2fe31897ca81519407

    • SHA1

      629cafb779045a3eb75f856d34a98ace877ba31f

    • SHA256

      25d9668bfb2fcd151e0095c8b3e81c179d03f9490d27dc79965b857ddc137e42

    • SHA512

      046b35df6e5afb4b50a190d12f1b416bc1f58cbf81c8ad4b423380230e8305a18a94f2203d59c31dd73a84c88d52f335dc804622ae1c51c5f7f5196617e1a8a1

    • SSDEEP

      3072:Qhd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JKVQcY:Q3fOeIv54W6SFKfc9me9v9/JKV

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks