General

  • Target

    108cdc896c97747b395fd96dc4c9736c

  • Size

    188KB

  • Sample

    231230-gqgsmahbgn

  • MD5

    108cdc896c97747b395fd96dc4c9736c

  • SHA1

    0e29e89a9ec97486519ce1f1dd0878506d81149d

  • SHA256

    d82cb7ee67f41d1b4c10fe39ff7e9f8ce13a73903b5fbb34f4957185c915ba43

  • SHA512

    15d89533439bce30689a687c187253544c0e345eaed895adc665200a829f2165a06eeb6043a686ae94c47928c06ff7585684ae0c5273f3f190db3878c3cdb1aa

  • SSDEEP

    3072:EA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoHo:EzIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      108cdc896c97747b395fd96dc4c9736c

    • Size

      188KB

    • MD5

      108cdc896c97747b395fd96dc4c9736c

    • SHA1

      0e29e89a9ec97486519ce1f1dd0878506d81149d

    • SHA256

      d82cb7ee67f41d1b4c10fe39ff7e9f8ce13a73903b5fbb34f4957185c915ba43

    • SHA512

      15d89533439bce30689a687c187253544c0e345eaed895adc665200a829f2165a06eeb6043a686ae94c47928c06ff7585684ae0c5273f3f190db3878c3cdb1aa

    • SSDEEP

      3072:EA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoHo:EzIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks