General

  • Target

    4a6c7c972e04a09062aa6c84f6f2b8be

  • Size

    188KB

  • Sample

    240108-eybv8sahgm

  • MD5

    4a6c7c972e04a09062aa6c84f6f2b8be

  • SHA1

    400790acc6fa1cfda3c99246556f4b526a71d2a4

  • SHA256

    2655040ea25e43b11eda7be830af483f8f1443fd216d8880253f23b7020b81af

  • SHA512

    1fb3a7fd351a8cdf0fcdf2f53691bdca90788add7cb9a9884e5c53a069ea3ef1aba810005d64e470cf8a56deea7ee041da6a6ef72941721b17259672fce10444

  • SSDEEP

    3072:RA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAowo:RzIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      4a6c7c972e04a09062aa6c84f6f2b8be

    • Size

      188KB

    • MD5

      4a6c7c972e04a09062aa6c84f6f2b8be

    • SHA1

      400790acc6fa1cfda3c99246556f4b526a71d2a4

    • SHA256

      2655040ea25e43b11eda7be830af483f8f1443fd216d8880253f23b7020b81af

    • SHA512

      1fb3a7fd351a8cdf0fcdf2f53691bdca90788add7cb9a9884e5c53a069ea3ef1aba810005d64e470cf8a56deea7ee041da6a6ef72941721b17259672fce10444

    • SSDEEP

      3072:RA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAowo:RzIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks