General

  • Target

    5ac68b78b46a223cbd526ac6905ea187

  • Size

    188KB

  • Sample

    240114-kecw3sfhh6

  • MD5

    5ac68b78b46a223cbd526ac6905ea187

  • SHA1

    d043f89fee297bd5af6906c7e0acbad278c7fd80

  • SHA256

    2837a1121f9890cd2348b7ed1d28329a5b7d2112962a49f06d43df4e4f1984d3

  • SHA512

    43ab836c6ce78a1071611f4c6bd91ca8161b3384bb335d0666c24ee2720d7759a03ae3675af7c8dcd8f63877aa6505e2941ef73e2fc68f80c6eee68280e0ec1e

  • SSDEEP

    3072:kA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoso:kzIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      5ac68b78b46a223cbd526ac6905ea187

    • Size

      188KB

    • MD5

      5ac68b78b46a223cbd526ac6905ea187

    • SHA1

      d043f89fee297bd5af6906c7e0acbad278c7fd80

    • SHA256

      2837a1121f9890cd2348b7ed1d28329a5b7d2112962a49f06d43df4e4f1984d3

    • SHA512

      43ab836c6ce78a1071611f4c6bd91ca8161b3384bb335d0666c24ee2720d7759a03ae3675af7c8dcd8f63877aa6505e2941ef73e2fc68f80c6eee68280e0ec1e

    • SSDEEP

      3072:kA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoso:kzIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks