General

  • Target

    54b45a51fbc6169c39d8946700e36981

  • Size

    188KB

  • Sample

    240111-11jjraaca9

  • MD5

    54b45a51fbc6169c39d8946700e36981

  • SHA1

    e0a2f0a5b1edf6110b0b1091d6e9190e13e57e72

  • SHA256

    e7abf30137384183ffbb1c61d979b26f77ab3db987d9f0e7aaa1ddf8b3f97676

  • SHA512

    56879410c8a2703539cef4a71b7077479692c122fcc63dadb6238813ef268a5b58b4e58f813bedcfa6f3a12ea16cb784c23aebb71328b2620a167a797e1f66d3

  • SSDEEP

    3072:EA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo8o:EzIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      54b45a51fbc6169c39d8946700e36981

    • Size

      188KB

    • MD5

      54b45a51fbc6169c39d8946700e36981

    • SHA1

      e0a2f0a5b1edf6110b0b1091d6e9190e13e57e72

    • SHA256

      e7abf30137384183ffbb1c61d979b26f77ab3db987d9f0e7aaa1ddf8b3f97676

    • SHA512

      56879410c8a2703539cef4a71b7077479692c122fcc63dadb6238813ef268a5b58b4e58f813bedcfa6f3a12ea16cb784c23aebb71328b2620a167a797e1f66d3

    • SSDEEP

      3072:EA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo8o:EzIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks