General

  • Target

    37e550e833ef4681b290ed330a62dea1.exe

  • Size

    188KB

  • Sample

    240110-yaplzafadr

  • MD5

    37e550e833ef4681b290ed330a62dea1

  • SHA1

    58f3a3693bdddaf78da99175c655c76be2b7c1dc

  • SHA256

    a5be075d6f86ee564bb4ce0e2c232df887dfa7f7e6b682feca17657283436622

  • SHA512

    2b69ec5a7980437a2f400852bee95bc4e8e82abd52b3d91978cbb0d8650f432cdc5c64ac7dc675f36b32ab0c45ca81a258dbdc46d4a816e41a271a31cd0c188a

  • SSDEEP

    3072:vA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoNo:vzIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      37e550e833ef4681b290ed330a62dea1.exe

    • Size

      188KB

    • MD5

      37e550e833ef4681b290ed330a62dea1

    • SHA1

      58f3a3693bdddaf78da99175c655c76be2b7c1dc

    • SHA256

      a5be075d6f86ee564bb4ce0e2c232df887dfa7f7e6b682feca17657283436622

    • SHA512

      2b69ec5a7980437a2f400852bee95bc4e8e82abd52b3d91978cbb0d8650f432cdc5c64ac7dc675f36b32ab0c45ca81a258dbdc46d4a816e41a271a31cd0c188a

    • SSDEEP

      3072:vA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoNo:vzIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks