General

  • Target

    38e865fa67695596b06a96059233b9bc

  • Size

    188KB

  • Sample

    231231-q9x4dsbef5

  • MD5

    38e865fa67695596b06a96059233b9bc

  • SHA1

    f43bec72c019f06f44396055a45273d67af4ee8b

  • SHA256

    ca7b9f546c85a790246609aad6de0e9c9371705d04f28aef45c80c1f277751d7

  • SHA512

    799398c934747b7d52f55c854ecfd802861fa23abc71dd120bc5b9cb89feace93b920e73d5136d71f2e6e4ef384a19d203781ee82379e1571d62b96351cf35eb

  • SSDEEP

    3072:rH0uyjZqEpAK+Gf78TBdrXkTM5vhRg9Esf0DwvtyMpVnpA+z6tX8sxKViWJ7dU:rUua/Pv7YNhRIEZDeXVpAxtMsxK

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      38e865fa67695596b06a96059233b9bc

    • Size

      188KB

    • MD5

      38e865fa67695596b06a96059233b9bc

    • SHA1

      f43bec72c019f06f44396055a45273d67af4ee8b

    • SHA256

      ca7b9f546c85a790246609aad6de0e9c9371705d04f28aef45c80c1f277751d7

    • SHA512

      799398c934747b7d52f55c854ecfd802861fa23abc71dd120bc5b9cb89feace93b920e73d5136d71f2e6e4ef384a19d203781ee82379e1571d62b96351cf35eb

    • SSDEEP

      3072:rH0uyjZqEpAK+Gf78TBdrXkTM5vhRg9Esf0DwvtyMpVnpA+z6tX8sxKViWJ7dU:rUua/Pv7YNhRIEZDeXVpAxtMsxK

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks