General

  • Target

    abef195836a0a2479c9e830871668d9c

  • Size

    188KB

  • Sample

    240228-p7jybacb6s

  • MD5

    abef195836a0a2479c9e830871668d9c

  • SHA1

    9c64cf9f89f27248b08a0aa09c2270cd2a4bc11f

  • SHA256

    023c5fba115747bb1cbe401504a57507c2eff1a39b7a3c25babbd532e3fa0a0f

  • SHA512

    eb8435f160c445945ab2a9aef90b6b6878dd5ae6a918ed5b822da09848cb7230e2b4a81deec21781f16fc262e665b69cda3081e561cc24831b8add782192ae2e

  • SSDEEP

    3072:UA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo7o:UzIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      abef195836a0a2479c9e830871668d9c

    • Size

      188KB

    • MD5

      abef195836a0a2479c9e830871668d9c

    • SHA1

      9c64cf9f89f27248b08a0aa09c2270cd2a4bc11f

    • SHA256

      023c5fba115747bb1cbe401504a57507c2eff1a39b7a3c25babbd532e3fa0a0f

    • SHA512

      eb8435f160c445945ab2a9aef90b6b6878dd5ae6a918ed5b822da09848cb7230e2b4a81deec21781f16fc262e665b69cda3081e561cc24831b8add782192ae2e

    • SSDEEP

      3072:UA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo7o:UzIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks