General

  • Target

    47a11131875c2ba8f1b0a165a703fa83

  • Size

    188KB

  • Sample

    240107-bfc4sscgh7

  • MD5

    47a11131875c2ba8f1b0a165a703fa83

  • SHA1

    de33791071b28b89007016410a08b13ba61319b1

  • SHA256

    96041e5e221be7df90d1671566abb49a2ae76aa505cd13351447b33696567e9d

  • SHA512

    cb4c6cb87fc3b560b6c1ecf6974c3e7da49675474735a0709d47e32be5ab9e99809e1c056684ecf339c16d25170dbe86584fee6845d16f05c51c4330f372a9a7

  • SSDEEP

    3072:rH0uyjZqEpAK+Gf78TBdrXkTM5vhRg9Esf0DwvtyMpVnpA+z6tX8sxKViWt7dU:rUua/Pv7YNhRIEZDeXVpAxtMsxK

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      47a11131875c2ba8f1b0a165a703fa83

    • Size

      188KB

    • MD5

      47a11131875c2ba8f1b0a165a703fa83

    • SHA1

      de33791071b28b89007016410a08b13ba61319b1

    • SHA256

      96041e5e221be7df90d1671566abb49a2ae76aa505cd13351447b33696567e9d

    • SHA512

      cb4c6cb87fc3b560b6c1ecf6974c3e7da49675474735a0709d47e32be5ab9e99809e1c056684ecf339c16d25170dbe86584fee6845d16f05c51c4330f372a9a7

    • SSDEEP

      3072:rH0uyjZqEpAK+Gf78TBdrXkTM5vhRg9Esf0DwvtyMpVnpA+z6tX8sxKViWt7dU:rUua/Pv7YNhRIEZDeXVpAxtMsxK

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks