General

  • Target

    b719c397028e8725052f46b4261c0376

  • Size

    188KB

  • Sample

    240306-lk825shd28

  • MD5

    b719c397028e8725052f46b4261c0376

  • SHA1

    0877560fca77fb4f71d751c1458ff951a479fffd

  • SHA256

    9470815dac821bbc66ff60029404353682fbbf7e97b9e703e0b024a59b1f6d0f

  • SHA512

    be6e33ae62857b40cd59adb82ddf3509d8cc6ab26f097afc098a38b82acb615b339ed50e97bbf5c97b2d000e8a87f871dc71892c6d648a0bb4af8217633ffff7

  • SSDEEP

    3072:AA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAopo:AzIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      b719c397028e8725052f46b4261c0376

    • Size

      188KB

    • MD5

      b719c397028e8725052f46b4261c0376

    • SHA1

      0877560fca77fb4f71d751c1458ff951a479fffd

    • SHA256

      9470815dac821bbc66ff60029404353682fbbf7e97b9e703e0b024a59b1f6d0f

    • SHA512

      be6e33ae62857b40cd59adb82ddf3509d8cc6ab26f097afc098a38b82acb615b339ed50e97bbf5c97b2d000e8a87f871dc71892c6d648a0bb4af8217633ffff7

    • SSDEEP

      3072:AA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAopo:AzIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks