General

  • Target

    b81382be175d2deb65cc759bcc99aeea

  • Size

    188KB

  • Sample

    240306-w284ksfa77

  • MD5

    b81382be175d2deb65cc759bcc99aeea

  • SHA1

    254af48fb7adf2a54015834eb5a58cceefd790fa

  • SHA256

    799bf60d33c37aa61ae62bf7ac4317970e98f68d07d5dda319f48aeb359bbe2a

  • SHA512

    de1326ccfdde3e21cef80d51baddd620763ef3e4e7e4b2a5f65bda7723be9b3e420a1b451061e5201b718ef7b01e8a833b57807dab6d008272380f1c2c530a33

  • SSDEEP

    3072:FA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo2o:FzIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      b81382be175d2deb65cc759bcc99aeea

    • Size

      188KB

    • MD5

      b81382be175d2deb65cc759bcc99aeea

    • SHA1

      254af48fb7adf2a54015834eb5a58cceefd790fa

    • SHA256

      799bf60d33c37aa61ae62bf7ac4317970e98f68d07d5dda319f48aeb359bbe2a

    • SHA512

      de1326ccfdde3e21cef80d51baddd620763ef3e4e7e4b2a5f65bda7723be9b3e420a1b451061e5201b718ef7b01e8a833b57807dab6d008272380f1c2c530a33

    • SSDEEP

      3072:FA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo2o:FzIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks