General

  • Target

    2b381a71552973f79320b620d2d9a54c

  • Size

    188KB

  • Sample

    231231-gv4g7aeeb2

  • MD5

    2b381a71552973f79320b620d2d9a54c

  • SHA1

    f785147804a6ebf0af2451004aa44b391eb9412f

  • SHA256

    511a17d3bda9ef978d26c29f4cea5fa6479710a19cd00b53095c0b0525f0e830

  • SHA512

    74ad8d1b59a89e24db7cc3bac720210c310dc76b1ce2488656fd20b3f47d98dc82e6d90f817e9b65eac51b48d2db5e80e6767a9baaa3698f07d7de7213cf03a9

  • SSDEEP

    3072:TH0uyjZqEpAK+Gf78TBdrXkTM5vhRg9Esf0DwvtyMpVnpA+z6tX8sxKViWw7dU:TUua/Pv7YNhRIEZDeXVpAxtMsxK

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      2b381a71552973f79320b620d2d9a54c

    • Size

      188KB

    • MD5

      2b381a71552973f79320b620d2d9a54c

    • SHA1

      f785147804a6ebf0af2451004aa44b391eb9412f

    • SHA256

      511a17d3bda9ef978d26c29f4cea5fa6479710a19cd00b53095c0b0525f0e830

    • SHA512

      74ad8d1b59a89e24db7cc3bac720210c310dc76b1ce2488656fd20b3f47d98dc82e6d90f817e9b65eac51b48d2db5e80e6767a9baaa3698f07d7de7213cf03a9

    • SSDEEP

      3072:TH0uyjZqEpAK+Gf78TBdrXkTM5vhRg9Esf0DwvtyMpVnpA+z6tX8sxKViWw7dU:TUua/Pv7YNhRIEZDeXVpAxtMsxK

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks