General

  • Target

    36f88b31dec983c6c5ec126c76fc2bee

  • Size

    188KB

  • Sample

    231231-p63zssddhp

  • MD5

    36f88b31dec983c6c5ec126c76fc2bee

  • SHA1

    91c77e1bad0fced21d33aef52ba35cf375519710

  • SHA256

    1897fbd9152ed616f8249956eb6c21944927c5edf5287ac9d58d8b30dcae5369

  • SHA512

    b20e9cfef4591cd8e5de51da31ba6a361b7a72bed1d1d55d8456384e125b666dab1844580ac876550b6ecaf69e8ffbb13a688b1c21da44b1016b7f32c49473b4

  • SSDEEP

    3072:NA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoTo:NzIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      36f88b31dec983c6c5ec126c76fc2bee

    • Size

      188KB

    • MD5

      36f88b31dec983c6c5ec126c76fc2bee

    • SHA1

      91c77e1bad0fced21d33aef52ba35cf375519710

    • SHA256

      1897fbd9152ed616f8249956eb6c21944927c5edf5287ac9d58d8b30dcae5369

    • SHA512

      b20e9cfef4591cd8e5de51da31ba6a361b7a72bed1d1d55d8456384e125b666dab1844580ac876550b6ecaf69e8ffbb13a688b1c21da44b1016b7f32c49473b4

    • SSDEEP

      3072:NA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoTo:NzIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks