General

  • Target

    68a49d1e15d88b333b994e733acffe8c

  • Size

    184KB

  • Sample

    240119-zy7ywseca8

  • MD5

    68a49d1e15d88b333b994e733acffe8c

  • SHA1

    17057308df571afaa12d2a96260d464dfc3c6dca

  • SHA256

    ea036c05d648b1783b291528c0a61061e7a37a0fe12d4d594ca30ffe433bc01a

  • SHA512

    909925864824d153b368bd3c9ab0af3defd168b3a87e70319b66ac46bc733363c38c7343d46f0de789109a96194b4ceed7a46c5b8112d7fe114a10394c68a8b9

  • SSDEEP

    3072:9hd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33J7VQcY:93fOeIv54W6SFKfc9me9v9/J7V

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

51.79.50.122:443

222.124.142.67:10443

138.201.222.158:4664

rc4.plain
rc4.plain

Targets

    • Target

      68a49d1e15d88b333b994e733acffe8c

    • Size

      184KB

    • MD5

      68a49d1e15d88b333b994e733acffe8c

    • SHA1

      17057308df571afaa12d2a96260d464dfc3c6dca

    • SHA256

      ea036c05d648b1783b291528c0a61061e7a37a0fe12d4d594ca30ffe433bc01a

    • SHA512

      909925864824d153b368bd3c9ab0af3defd168b3a87e70319b66ac46bc733363c38c7343d46f0de789109a96194b4ceed7a46c5b8112d7fe114a10394c68a8b9

    • SSDEEP

      3072:9hd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33J7VQcY:93fOeIv54W6SFKfc9me9v9/J7V

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks