General

  • Target

    506c936822ff89ed12bcdb6510b6c894

  • Size

    188KB

  • Sample

    240110-nhcl9sfcg6

  • MD5

    506c936822ff89ed12bcdb6510b6c894

  • SHA1

    c54162fcbd70b0ddc451568a2e2ba3a4c2fd767f

  • SHA256

    482451c4462a2e1ca46cb7912ba06da3b0bfd74b1dae1a415fb0d72b87510fc4

  • SHA512

    731825f4c887d7b9e018858a7595231905fb308b52873d66a3660da92e5abc6277c7621249a0e8643cb94615a00eb3cf8689adeb430183c4233261f1c577fe8e

  • SSDEEP

    3072:pA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoco:pzIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      506c936822ff89ed12bcdb6510b6c894

    • Size

      188KB

    • MD5

      506c936822ff89ed12bcdb6510b6c894

    • SHA1

      c54162fcbd70b0ddc451568a2e2ba3a4c2fd767f

    • SHA256

      482451c4462a2e1ca46cb7912ba06da3b0bfd74b1dae1a415fb0d72b87510fc4

    • SHA512

      731825f4c887d7b9e018858a7595231905fb308b52873d66a3660da92e5abc6277c7621249a0e8643cb94615a00eb3cf8689adeb430183c4233261f1c577fe8e

    • SSDEEP

      3072:pA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoco:pzIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks