General

  • Target

    7d2483e045cbfc438af27eaef3d075be

  • Size

    188KB

  • Sample

    240128-pr2s7aafb7

  • MD5

    7d2483e045cbfc438af27eaef3d075be

  • SHA1

    fd22905b400201838a08ae69ec88903393ce7a72

  • SHA256

    5c2554d75b429d240a562cb7e2231a4b1b0a8ccd7878d953ebda33103e4db657

  • SHA512

    53765e492814401f52b24c1c85736e1b57c3ebdd4846e99206d0f2182a0d7f4793d984a0dcdabc29c32627b6696391b26b3c34905cd163d49926f5a08aef581c

  • SSDEEP

    3072:qH0uyjZqEpAK+Gf78TBdrXkTM5vhRg9Esf0DwvtyMpVnpA+z6tX8sxKViWi7dU:qUua/Pv7YNhRIEZDeXVpAxtMsxK

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      7d2483e045cbfc438af27eaef3d075be

    • Size

      188KB

    • MD5

      7d2483e045cbfc438af27eaef3d075be

    • SHA1

      fd22905b400201838a08ae69ec88903393ce7a72

    • SHA256

      5c2554d75b429d240a562cb7e2231a4b1b0a8ccd7878d953ebda33103e4db657

    • SHA512

      53765e492814401f52b24c1c85736e1b57c3ebdd4846e99206d0f2182a0d7f4793d984a0dcdabc29c32627b6696391b26b3c34905cd163d49926f5a08aef581c

    • SSDEEP

      3072:qH0uyjZqEpAK+Gf78TBdrXkTM5vhRg9Esf0DwvtyMpVnpA+z6tX8sxKViWi7dU:qUua/Pv7YNhRIEZDeXVpAxtMsxK

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks