General

  • Target

    57997457450235375dfa2880863c0ed7

  • Size

    188KB

  • Sample

    240113-bmdznsaaa3

  • MD5

    57997457450235375dfa2880863c0ed7

  • SHA1

    0bc404d6b52b15e506788677b0ab63d18653a97d

  • SHA256

    6cb1af59fd679f769be458828ed1ac42301d00cc80bb3a3b1f0fb8033c0df3bf

  • SHA512

    fd752e6fe6f6e62707818cc6099b03dfb991d78c3ab93bd205a99ada69d4eccd90bd612dc01d810acca9b6fda8fe6fbbe0f1296a6929a3d6d71b4617ef14c2e8

  • SSDEEP

    3072:eA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoSo:ezIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      57997457450235375dfa2880863c0ed7

    • Size

      188KB

    • MD5

      57997457450235375dfa2880863c0ed7

    • SHA1

      0bc404d6b52b15e506788677b0ab63d18653a97d

    • SHA256

      6cb1af59fd679f769be458828ed1ac42301d00cc80bb3a3b1f0fb8033c0df3bf

    • SHA512

      fd752e6fe6f6e62707818cc6099b03dfb991d78c3ab93bd205a99ada69d4eccd90bd612dc01d810acca9b6fda8fe6fbbe0f1296a6929a3d6d71b4617ef14c2e8

    • SSDEEP

      3072:eA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoSo:ezIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks