General

  • Target

    4f937cda6ec052ab2bbe76c786c7c1bd

  • Size

    184KB

  • Sample

    240110-e2ndfadfek

  • MD5

    4f937cda6ec052ab2bbe76c786c7c1bd

  • SHA1

    ab0b4b159403da1831bda015a3695aee584e5e3b

  • SHA256

    bc236411bdeae140f4053210aa5301047dd4c9a1868a9134fe5961ca030a9e43

  • SHA512

    50e9c485110fd35ad63e4d95bef8d6333eda2b863027680fb5b3a473bcf8fc69d5b282eca61ba3a64cee48b37bf7b676adeae3b2ebb6580d8aa03fbfad3de902

  • SSDEEP

    3072:yhd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JhVQcY:y3fOeIv54W6SFKfc9me9v9/JhV

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

51.79.50.122:443

222.124.142.67:10443

138.201.222.158:4664

rc4.plain
rc4.plain

Targets

    • Target

      4f937cda6ec052ab2bbe76c786c7c1bd

    • Size

      184KB

    • MD5

      4f937cda6ec052ab2bbe76c786c7c1bd

    • SHA1

      ab0b4b159403da1831bda015a3695aee584e5e3b

    • SHA256

      bc236411bdeae140f4053210aa5301047dd4c9a1868a9134fe5961ca030a9e43

    • SHA512

      50e9c485110fd35ad63e4d95bef8d6333eda2b863027680fb5b3a473bcf8fc69d5b282eca61ba3a64cee48b37bf7b676adeae3b2ebb6580d8aa03fbfad3de902

    • SSDEEP

      3072:yhd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JhVQcY:y3fOeIv54W6SFKfc9me9v9/JhV

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks