General

  • Target

    992a02f1ebefa995a95e32e8f0b6c880

  • Size

    188KB

  • Sample

    240213-mba97agf97

  • MD5

    992a02f1ebefa995a95e32e8f0b6c880

  • SHA1

    6334dc7ccc1925274dd621759e6807be05ef6ceb

  • SHA256

    52f2af594a53e6f89e0ae9f4d18ae92c0e979de7bbcfea262f02f40a71af481e

  • SHA512

    21e6b2652ac32b4e0f1215d26370bd9b43049dfc9c71f233fa5837447e5582bf5d37d7cf4a5fddbf0230d2d9998ac4d2b89092b0266cd2df0527b8813e1fc11c

  • SSDEEP

    3072:bH0uyjZqEpAK+Gf78TBdrXkTM5vhRg9Esf0DwvtyMpVnpA+z6tX8sxKViWi7dU:bUua/Pv7YNhRIEZDeXVpAxtMsxK

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      992a02f1ebefa995a95e32e8f0b6c880

    • Size

      188KB

    • MD5

      992a02f1ebefa995a95e32e8f0b6c880

    • SHA1

      6334dc7ccc1925274dd621759e6807be05ef6ceb

    • SHA256

      52f2af594a53e6f89e0ae9f4d18ae92c0e979de7bbcfea262f02f40a71af481e

    • SHA512

      21e6b2652ac32b4e0f1215d26370bd9b43049dfc9c71f233fa5837447e5582bf5d37d7cf4a5fddbf0230d2d9998ac4d2b89092b0266cd2df0527b8813e1fc11c

    • SSDEEP

      3072:bH0uyjZqEpAK+Gf78TBdrXkTM5vhRg9Esf0DwvtyMpVnpA+z6tX8sxKViWi7dU:bUua/Pv7YNhRIEZDeXVpAxtMsxK

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks