General

  • Target

    96da130d4ffccc521ad730e254f581b7

  • Size

    188KB

  • Sample

    240212-lpjcaabh53

  • MD5

    96da130d4ffccc521ad730e254f581b7

  • SHA1

    90f3f5f9fa2dbbd271fbcdf1afe075f4d06f82ce

  • SHA256

    50757d93fa4cec9c59c6001deaa94c2bcbe6c8a236ee0948b8cc60fd7f7e8cce

  • SHA512

    9d84fd4522182dc681e9edf97c43a9ca35444d841f01032998d909ddcebb83b74d0ba04e8bf6944069ee8fef96bfe50713c0e33b6e88887ec3a79b599ccce1fe

  • SSDEEP

    3072:0A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoWo:0zIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      96da130d4ffccc521ad730e254f581b7

    • Size

      188KB

    • MD5

      96da130d4ffccc521ad730e254f581b7

    • SHA1

      90f3f5f9fa2dbbd271fbcdf1afe075f4d06f82ce

    • SHA256

      50757d93fa4cec9c59c6001deaa94c2bcbe6c8a236ee0948b8cc60fd7f7e8cce

    • SHA512

      9d84fd4522182dc681e9edf97c43a9ca35444d841f01032998d909ddcebb83b74d0ba04e8bf6944069ee8fef96bfe50713c0e33b6e88887ec3a79b599ccce1fe

    • SSDEEP

      3072:0A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoWo:0zIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks