General

  • Target

    cc2914de4b1bb69e743eb0ec4991f5e6

  • Size

    188KB

  • Sample

    240315-xhl1daac25

  • MD5

    cc2914de4b1bb69e743eb0ec4991f5e6

  • SHA1

    0c5760474ee0f449793f42c8a3d946e30c7ede41

  • SHA256

    fc84494eb2a80cc8f493235200b73ae24e2e39dd5cc5cd5139665b51f0e6edff

  • SHA512

    e0f1dcfa9728c0b1a4fa51042e5f51afa810283ad667a00b77f21ff7f4c887da412b65a4a6497a3ce50c761d637faa266b1e6bf9521797fc03c6502f11595fca

  • SSDEEP

    3072:yH0uyjZqEpAK+Gf78TBdrXkTM5vhRg9Esf0DwvtyMpVnpA+z6tX8sxKViWw7dU:yUua/Pv7YNhRIEZDeXVpAxtMsxK

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      cc2914de4b1bb69e743eb0ec4991f5e6

    • Size

      188KB

    • MD5

      cc2914de4b1bb69e743eb0ec4991f5e6

    • SHA1

      0c5760474ee0f449793f42c8a3d946e30c7ede41

    • SHA256

      fc84494eb2a80cc8f493235200b73ae24e2e39dd5cc5cd5139665b51f0e6edff

    • SHA512

      e0f1dcfa9728c0b1a4fa51042e5f51afa810283ad667a00b77f21ff7f4c887da412b65a4a6497a3ce50c761d637faa266b1e6bf9521797fc03c6502f11595fca

    • SSDEEP

      3072:yH0uyjZqEpAK+Gf78TBdrXkTM5vhRg9Esf0DwvtyMpVnpA+z6tX8sxKViWw7dU:yUua/Pv7YNhRIEZDeXVpAxtMsxK

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks