Resubmissions

19-03-2024 12:52

240319-p4j4xadd2x 10

19-03-2024 12:50

240319-p22aeadc8s 10

General

  • Target

    d629541adbe431a5e7cc81032e689d4e

  • Size

    188KB

  • Sample

    240319-p22aeadc8s

  • MD5

    d629541adbe431a5e7cc81032e689d4e

  • SHA1

    0f21437874c62908ecd6f4f2452c7a3c399d2788

  • SHA256

    b7fb09c298c6cef1d0877be27fa05410675474862a7c3cb611dcfe44c8fa0113

  • SHA512

    95194f82dc07a154bc317c3fd3801e501ea20326f481bfd1bc31f4bcee73d07d88ed953a3228a7125a8c57aba64de0529aa2319adb854be2a83656f4f92ed4f5

  • SSDEEP

    3072:9A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAouo:9zIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      d629541adbe431a5e7cc81032e689d4e

    • Size

      188KB

    • MD5

      d629541adbe431a5e7cc81032e689d4e

    • SHA1

      0f21437874c62908ecd6f4f2452c7a3c399d2788

    • SHA256

      b7fb09c298c6cef1d0877be27fa05410675474862a7c3cb611dcfe44c8fa0113

    • SHA512

      95194f82dc07a154bc317c3fd3801e501ea20326f481bfd1bc31f4bcee73d07d88ed953a3228a7125a8c57aba64de0529aa2319adb854be2a83656f4f92ed4f5

    • SSDEEP

      3072:9A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAouo:9zIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks