General

  • Target

    b61c92d01b122ef03ada54cbca3f890a

  • Size

    188KB

  • Sample

    240306-bbtkzsed8w

  • MD5

    b61c92d01b122ef03ada54cbca3f890a

  • SHA1

    d6bf641fd6d82ef5fff89c92ac38a16572fa6d90

  • SHA256

    7e50556b490c05ba669e9c3d44a5bb8585dca098c6109ec4663cb46697e9048d

  • SHA512

    a8a79587ed30a282d8b77b6a7512a707ce9ccbc069a8a31d81e0ef370638dd5c77fc1f36887e4a5ecceaac182e9026c6bed4b92b3c4c168105351bd6eac22fa1

  • SSDEEP

    3072:iA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAovo:izIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      b61c92d01b122ef03ada54cbca3f890a

    • Size

      188KB

    • MD5

      b61c92d01b122ef03ada54cbca3f890a

    • SHA1

      d6bf641fd6d82ef5fff89c92ac38a16572fa6d90

    • SHA256

      7e50556b490c05ba669e9c3d44a5bb8585dca098c6109ec4663cb46697e9048d

    • SHA512

      a8a79587ed30a282d8b77b6a7512a707ce9ccbc069a8a31d81e0ef370638dd5c77fc1f36887e4a5ecceaac182e9026c6bed4b92b3c4c168105351bd6eac22fa1

    • SSDEEP

      3072:iA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAovo:izIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks