General

  • Target

    7added39c50fa6aec73e3eb006bbc046

  • Size

    188KB

  • Sample

    240127-v9n8psghd4

  • MD5

    7added39c50fa6aec73e3eb006bbc046

  • SHA1

    130f1a720e57f08ac9293bf32129701469cab23c

  • SHA256

    8023b007675f0ff8189f8f2541f9442b4740472d8c867e0aa45e802d9b5c2911

  • SHA512

    a51bd3c339767179d53d7eda3ff949693c7a0be64fdfe0dae6b281a94e25034002162e63171fba2b069123983bdde49677bdda4f5502364ff78d8b0c3deca0e9

  • SSDEEP

    3072:WA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoBo:WzIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      7added39c50fa6aec73e3eb006bbc046

    • Size

      188KB

    • MD5

      7added39c50fa6aec73e3eb006bbc046

    • SHA1

      130f1a720e57f08ac9293bf32129701469cab23c

    • SHA256

      8023b007675f0ff8189f8f2541f9442b4740472d8c867e0aa45e802d9b5c2911

    • SHA512

      a51bd3c339767179d53d7eda3ff949693c7a0be64fdfe0dae6b281a94e25034002162e63171fba2b069123983bdde49677bdda4f5502364ff78d8b0c3deca0e9

    • SSDEEP

      3072:WA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoBo:WzIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks