General

  • Target

    c5114209cc7a3cf04f44d7ad9f3895ea

  • Size

    188KB

  • Sample

    240313-fya5dafd73

  • MD5

    c5114209cc7a3cf04f44d7ad9f3895ea

  • SHA1

    cca2370e9a69338dc6f08a1b7acede36f370cbd0

  • SHA256

    e63513ecf3cf8fb2af387316a321e729f0a5945ae5c908ababf97e438059b312

  • SHA512

    1a6b5a9147081d7c14b37a8cd153cc7618cf8908f6bc11e70e1c8009755b8319ee016c45463ac9fc16d210d555d30e496bade14d71948a5bdce25f02c9703ec4

  • SSDEEP

    3072:cA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoLo:czIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      c5114209cc7a3cf04f44d7ad9f3895ea

    • Size

      188KB

    • MD5

      c5114209cc7a3cf04f44d7ad9f3895ea

    • SHA1

      cca2370e9a69338dc6f08a1b7acede36f370cbd0

    • SHA256

      e63513ecf3cf8fb2af387316a321e729f0a5945ae5c908ababf97e438059b312

    • SHA512

      1a6b5a9147081d7c14b37a8cd153cc7618cf8908f6bc11e70e1c8009755b8319ee016c45463ac9fc16d210d555d30e496bade14d71948a5bdce25f02c9703ec4

    • SSDEEP

      3072:cA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoLo:czIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks