General

  • Target

    bb3f35480cfc41bce583bb03477b956d

  • Size

    188KB

  • Sample

    240308-pjkjyaff8z

  • MD5

    bb3f35480cfc41bce583bb03477b956d

  • SHA1

    b3aa03703509444fb90061f0a0c59b2736b97e1a

  • SHA256

    a7b4b22b191e05bad3a90a2a4279759288d9305685549e5c2f0261b74702a292

  • SHA512

    e00335e6797ea5afe071b530d935e20d68e6bf65133740a3f24e7048f8ef8e30e6dbbbd6101b7c5b1b685df420867db58a8f286b13879a3f2cfd1268a92c7939

  • SSDEEP

    3072:YA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAono:YzIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      bb3f35480cfc41bce583bb03477b956d

    • Size

      188KB

    • MD5

      bb3f35480cfc41bce583bb03477b956d

    • SHA1

      b3aa03703509444fb90061f0a0c59b2736b97e1a

    • SHA256

      a7b4b22b191e05bad3a90a2a4279759288d9305685549e5c2f0261b74702a292

    • SHA512

      e00335e6797ea5afe071b530d935e20d68e6bf65133740a3f24e7048f8ef8e30e6dbbbd6101b7c5b1b685df420867db58a8f286b13879a3f2cfd1268a92c7939

    • SSDEEP

      3072:YA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAono:YzIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks