General

  • Target

    992ad7195d37ee6fba566d7bfdc8bc9f

  • Size

    188KB

  • Sample

    240213-mclsbafd3t

  • MD5

    992ad7195d37ee6fba566d7bfdc8bc9f

  • SHA1

    906202faf1570136cf937f249915dfc8ce894d69

  • SHA256

    c76109d664519e3c52c6ce5918b58cc9418e0cf6120a9da10aa47e5ef6b192e2

  • SHA512

    d04c5429dea00558b5a872168b8b2a14b300d4aa1a5c7500e89563675e8735eb1d2d17dadf7896ab01117444af1ff78d006ff47ef4531c935ea6477eecbdc325

  • SSDEEP

    3072:iA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo9o:izIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      992ad7195d37ee6fba566d7bfdc8bc9f

    • Size

      188KB

    • MD5

      992ad7195d37ee6fba566d7bfdc8bc9f

    • SHA1

      906202faf1570136cf937f249915dfc8ce894d69

    • SHA256

      c76109d664519e3c52c6ce5918b58cc9418e0cf6120a9da10aa47e5ef6b192e2

    • SHA512

      d04c5429dea00558b5a872168b8b2a14b300d4aa1a5c7500e89563675e8735eb1d2d17dadf7896ab01117444af1ff78d006ff47ef4531c935ea6477eecbdc325

    • SSDEEP

      3072:iA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo9o:izIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks