General

  • Target

    17d3baca8ab6e6e5978db1bdd464c66a

  • Size

    188KB

  • Sample

    231230-n6plqsfaa6

  • MD5

    17d3baca8ab6e6e5978db1bdd464c66a

  • SHA1

    fe6de729d167221024079cf8764fe7d613d71fad

  • SHA256

    ca57d125248f02eb1e3c854b13639ed91371759660da30527d35bcb782857bd0

  • SHA512

    91b2828be08cd285298e6c1027ca1d0763ba2d9a7510069b61483121b0f94456676e6000c6e28ccd7e4585bfdd923ae9c45ee306620a0c40cd931aba9cff5c36

  • SSDEEP

    3072:bA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoNo:bzIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      17d3baca8ab6e6e5978db1bdd464c66a

    • Size

      188KB

    • MD5

      17d3baca8ab6e6e5978db1bdd464c66a

    • SHA1

      fe6de729d167221024079cf8764fe7d613d71fad

    • SHA256

      ca57d125248f02eb1e3c854b13639ed91371759660da30527d35bcb782857bd0

    • SHA512

      91b2828be08cd285298e6c1027ca1d0763ba2d9a7510069b61483121b0f94456676e6000c6e28ccd7e4585bfdd923ae9c45ee306620a0c40cd931aba9cff5c36

    • SSDEEP

      3072:bA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoNo:bzIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks