General

  • Target

    01f69f3cc857c56740d6b9dd5a2c6f35

  • Size

    184KB

  • Sample

    231230-vfcyksche9

  • MD5

    01f69f3cc857c56740d6b9dd5a2c6f35

  • SHA1

    c0623d534e3575534c11726ba0aab182f78f7792

  • SHA256

    34a581d974e77e240fb07b3c4a913dac5457a1f1ba614bfa09c4dda396181803

  • SHA512

    7d62fce24ab3e840fdf279f73af7375b713f1db181772dc2f9ad820e872734e3e1f4182cdd3f34175d209c485dff72ec06c8bf93f6d030222a2f67a99ae52f4f

  • SSDEEP

    3072:mhd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JKVQcY:m3fOeIv54W6SFKfc9me9v9/JKV

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

51.79.50.122:443

222.124.142.67:10443

138.201.222.158:4664

rc4.plain
rc4.plain

Targets

    • Target

      01f69f3cc857c56740d6b9dd5a2c6f35

    • Size

      184KB

    • MD5

      01f69f3cc857c56740d6b9dd5a2c6f35

    • SHA1

      c0623d534e3575534c11726ba0aab182f78f7792

    • SHA256

      34a581d974e77e240fb07b3c4a913dac5457a1f1ba614bfa09c4dda396181803

    • SHA512

      7d62fce24ab3e840fdf279f73af7375b713f1db181772dc2f9ad820e872734e3e1f4182cdd3f34175d209c485dff72ec06c8bf93f6d030222a2f67a99ae52f4f

    • SSDEEP

      3072:mhd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JKVQcY:m3fOeIv54W6SFKfc9me9v9/JKV

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks