General

  • Target

    43ac0616176a9bbb76da54bb4282015f

  • Size

    188KB

  • Sample

    240105-pjbl2acgh7

  • MD5

    43ac0616176a9bbb76da54bb4282015f

  • SHA1

    8c99a6924c5e5c8c9a11cf5e4d8d271096d59ac6

  • SHA256

    58d1fcb83d3e7b6b603b5bb80b53935e8c7dc85b6ebadaaf807497e2584b67bc

  • SHA512

    6b052a861fd4c5e73ab4e6558efdcbe125737aa31963714f743dc85a61a771037f1c1802a8eb31a58102386c837f21db1278c6c5ca157999307909405ac953d2

  • SSDEEP

    3072:IA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoQo:IzIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      43ac0616176a9bbb76da54bb4282015f

    • Size

      188KB

    • MD5

      43ac0616176a9bbb76da54bb4282015f

    • SHA1

      8c99a6924c5e5c8c9a11cf5e4d8d271096d59ac6

    • SHA256

      58d1fcb83d3e7b6b603b5bb80b53935e8c7dc85b6ebadaaf807497e2584b67bc

    • SHA512

      6b052a861fd4c5e73ab4e6558efdcbe125737aa31963714f743dc85a61a771037f1c1802a8eb31a58102386c837f21db1278c6c5ca157999307909405ac953d2

    • SSDEEP

      3072:IA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoQo:IzIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks