General

  • Target

    4d6220960912b45b6a3e4e4ccaf67cb3

  • Size

    188KB

  • Sample

    240109-fjd8gsgael

  • MD5

    4d6220960912b45b6a3e4e4ccaf67cb3

  • SHA1

    4ba4148079f94bed3758c842e6e17fddb9eb8e17

  • SHA256

    5c346bc15ea6ae51c2009e2b733ac062ba864dc7422917de85b4a272bab11548

  • SHA512

    057e1fed9e0bdb65bdd396992521e9714c2ad8b8235f71fe9a13bfced6f91085efa61f9e625e38d975abf7b8356b8d68a72ba16724501028af49878e9cbbf79f

  • SSDEEP

    3072:FH0uyjZqEpAK+Gf78TBdrXkTM5vhRg9Esf0DwvtyMpVnpA+z6tX8sxKViWC7dU:FUua/Pv7YNhRIEZDeXVpAxtMsxK

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      4d6220960912b45b6a3e4e4ccaf67cb3

    • Size

      188KB

    • MD5

      4d6220960912b45b6a3e4e4ccaf67cb3

    • SHA1

      4ba4148079f94bed3758c842e6e17fddb9eb8e17

    • SHA256

      5c346bc15ea6ae51c2009e2b733ac062ba864dc7422917de85b4a272bab11548

    • SHA512

      057e1fed9e0bdb65bdd396992521e9714c2ad8b8235f71fe9a13bfced6f91085efa61f9e625e38d975abf7b8356b8d68a72ba16724501028af49878e9cbbf79f

    • SSDEEP

      3072:FH0uyjZqEpAK+Gf78TBdrXkTM5vhRg9Esf0DwvtyMpVnpA+z6tX8sxKViWC7dU:FUua/Pv7YNhRIEZDeXVpAxtMsxK

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks