General

  • Target

    adf7769254a4e3ad03fddfaa3a46566d

  • Size

    188KB

  • Sample

    240229-htj8lahh58

  • MD5

    adf7769254a4e3ad03fddfaa3a46566d

  • SHA1

    c83689895f9d87838f143b31fb078652c701204b

  • SHA256

    cb9e1a51782b27152245518ed8de6c3eedd9776f2186f40e6c11b09375b735ac

  • SHA512

    6ec19d6834c785ffd010905e0af3bea7f802b0975b0c87b3e3ac0602d6198cadae0ad9eaf07c82a3954f9fa1b6850443afab99973d09b25c8802b109f5075110

  • SSDEEP

    3072:hA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoio:hzIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      adf7769254a4e3ad03fddfaa3a46566d

    • Size

      188KB

    • MD5

      adf7769254a4e3ad03fddfaa3a46566d

    • SHA1

      c83689895f9d87838f143b31fb078652c701204b

    • SHA256

      cb9e1a51782b27152245518ed8de6c3eedd9776f2186f40e6c11b09375b735ac

    • SHA512

      6ec19d6834c785ffd010905e0af3bea7f802b0975b0c87b3e3ac0602d6198cadae0ad9eaf07c82a3954f9fa1b6850443afab99973d09b25c8802b109f5075110

    • SSDEEP

      3072:hA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoio:hzIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks