General

  • Target

    18eb9f4e0bd10727555dba8908f796fd

  • Size

    188KB

  • Sample

    231230-py158sdbd6

  • MD5

    18eb9f4e0bd10727555dba8908f796fd

  • SHA1

    b7a35a2dfac9afcad65ba0925496202795ebb17f

  • SHA256

    62816009e4caafeeeb839b0283b8271e7d8d431b4f2ed538abbd0921e882e446

  • SHA512

    564ee5aeba80d8c4a5202f5adc4dd8df3ceaf37bc0c938d98dc18e5c544503f2ec1fc6dbcc242556cf1987371432cd52bbf314837d17fc28660d460306f9cfd8

  • SSDEEP

    3072:hH0uyjZqEpAK+Gf78TBdrXkTM5vhRg9Esf0DwvtyMpVnpA+z6tX8sxKViWW7dU:hUua/Pv7YNhRIEZDeXVpAxtMsxK

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      18eb9f4e0bd10727555dba8908f796fd

    • Size

      188KB

    • MD5

      18eb9f4e0bd10727555dba8908f796fd

    • SHA1

      b7a35a2dfac9afcad65ba0925496202795ebb17f

    • SHA256

      62816009e4caafeeeb839b0283b8271e7d8d431b4f2ed538abbd0921e882e446

    • SHA512

      564ee5aeba80d8c4a5202f5adc4dd8df3ceaf37bc0c938d98dc18e5c544503f2ec1fc6dbcc242556cf1987371432cd52bbf314837d17fc28660d460306f9cfd8

    • SSDEEP

      3072:hH0uyjZqEpAK+Gf78TBdrXkTM5vhRg9Esf0DwvtyMpVnpA+z6tX8sxKViWW7dU:hUua/Pv7YNhRIEZDeXVpAxtMsxK

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks