General

  • Target

    26e0010e63b887418c45873df9d6b253

  • Size

    184KB

  • Sample

    231231-ecckmscdam

  • MD5

    26e0010e63b887418c45873df9d6b253

  • SHA1

    6484d5119829ea36512f63d141d4ce69ca6490c1

  • SHA256

    e246a4ef1b4a8a01b0e6898143ae41fa69accdf804fcf870b5ea2f43d049518c

  • SHA512

    4dd4e8efb316b0750b1cac7086afccde0421ce3a167c2820990365a21e534b2d13941f3d1634d7fb4f859d43583816ffbb25fe5d8a333c906a03729674bfddd4

  • SSDEEP

    3072:mWhd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JiVQcY:p3fOeIv54W6SFKfc9me9v9/JiV

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

51.79.50.122:443

222.124.142.67:10443

138.201.222.158:4664

rc4.plain
rc4.plain

Targets

    • Target

      26e0010e63b887418c45873df9d6b253

    • Size

      184KB

    • MD5

      26e0010e63b887418c45873df9d6b253

    • SHA1

      6484d5119829ea36512f63d141d4ce69ca6490c1

    • SHA256

      e246a4ef1b4a8a01b0e6898143ae41fa69accdf804fcf870b5ea2f43d049518c

    • SHA512

      4dd4e8efb316b0750b1cac7086afccde0421ce3a167c2820990365a21e534b2d13941f3d1634d7fb4f859d43583816ffbb25fe5d8a333c906a03729674bfddd4

    • SSDEEP

      3072:mWhd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JiVQcY:p3fOeIv54W6SFKfc9me9v9/JiV

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks