General

  • Target

    c4e66c470a3306214d84d0f428d5ba4d

  • Size

    188KB

  • Sample

    240313-eemtdsea69

  • MD5

    c4e66c470a3306214d84d0f428d5ba4d

  • SHA1

    501c9d08c0f2e55f6eb8879ec773f6f7575c5aab

  • SHA256

    3d5b6095910f5b302ea11bf1dfffe25313bd07ba2b00d3f97bb509eea8257cdb

  • SHA512

    af2df70058726f0d6448e400adfff2e5518e23f590a78c874a8a59814cd7d742ce2e31b017d089441ce28e56435303309538f30f0031f2b9ef4b9a4886e23b9d

  • SSDEEP

    3072:VA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAomo:VzIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      c4e66c470a3306214d84d0f428d5ba4d

    • Size

      188KB

    • MD5

      c4e66c470a3306214d84d0f428d5ba4d

    • SHA1

      501c9d08c0f2e55f6eb8879ec773f6f7575c5aab

    • SHA256

      3d5b6095910f5b302ea11bf1dfffe25313bd07ba2b00d3f97bb509eea8257cdb

    • SHA512

      af2df70058726f0d6448e400adfff2e5518e23f590a78c874a8a59814cd7d742ce2e31b017d089441ce28e56435303309538f30f0031f2b9ef4b9a4886e23b9d

    • SSDEEP

      3072:VA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAomo:VzIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks