General

  • Target

    c13c4e9592543af73a017eefedc99d24

  • Size

    184KB

  • Sample

    240311-wjnd6aca57

  • MD5

    c13c4e9592543af73a017eefedc99d24

  • SHA1

    3ac72fdd14f1bb4ff5e51151dd8c138623daed35

  • SHA256

    4415c2420a3265a12e08e735c90ead6538809ea23c64b28da5509a2c6a6cc766

  • SHA512

    fc37dbbb802adbe8ee28a3051c91926ada9424e69bed9aa4c83ffbdf0f025eabcc0b55b9b6e90a9a30d028a438fd57d29da657eae410e0d2c9713a717cf78fcc

  • SSDEEP

    3072:zhd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JNVQcY:z3fOeIv54W6SFKfc9me9v9/JNV

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

51.79.50.122:443

222.124.142.67:10443

138.201.222.158:4664

rc4.plain
rc4.plain

Targets

    • Target

      c13c4e9592543af73a017eefedc99d24

    • Size

      184KB

    • MD5

      c13c4e9592543af73a017eefedc99d24

    • SHA1

      3ac72fdd14f1bb4ff5e51151dd8c138623daed35

    • SHA256

      4415c2420a3265a12e08e735c90ead6538809ea23c64b28da5509a2c6a6cc766

    • SHA512

      fc37dbbb802adbe8ee28a3051c91926ada9424e69bed9aa4c83ffbdf0f025eabcc0b55b9b6e90a9a30d028a438fd57d29da657eae410e0d2c9713a717cf78fcc

    • SSDEEP

      3072:zhd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JNVQcY:z3fOeIv54W6SFKfc9me9v9/JNV

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks