General

  • Target

    5a643e76ec5974cf4f0a3fabeb023529

  • Size

    188KB

  • Sample

    240114-f2exqscgcm

  • MD5

    5a643e76ec5974cf4f0a3fabeb023529

  • SHA1

    0e1c72b5d1117b460be5e67010c784b6db79471e

  • SHA256

    b1d9a5a8a40680b29314568f3737b00476324ff111b9a49d2a2f9da8799aa097

  • SHA512

    152fe3b4069e038ceadab2874803c41533a2f40062e2374512c07b68bf2c87400ec54fab2839f46acd8c837d19b18e3686b7772c5d7b9cfc32394adf02bc8386

  • SSDEEP

    3072:bA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo8o:bzIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      5a643e76ec5974cf4f0a3fabeb023529

    • Size

      188KB

    • MD5

      5a643e76ec5974cf4f0a3fabeb023529

    • SHA1

      0e1c72b5d1117b460be5e67010c784b6db79471e

    • SHA256

      b1d9a5a8a40680b29314568f3737b00476324ff111b9a49d2a2f9da8799aa097

    • SHA512

      152fe3b4069e038ceadab2874803c41533a2f40062e2374512c07b68bf2c87400ec54fab2839f46acd8c837d19b18e3686b7772c5d7b9cfc32394adf02bc8386

    • SSDEEP

      3072:bA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo8o:bzIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks