General

  • Target

    d71720c008845452b4495510666e737e

  • Size

    184KB

  • Sample

    240319-zprkjsfd54

  • MD5

    d71720c008845452b4495510666e737e

  • SHA1

    31aa5bf5c781322f9654091a859fd313522cd066

  • SHA256

    5f1eca557bb74e12d1ce95a2217a3986fe454409b3a4a0c1781056cf003e3fd1

  • SHA512

    b5ea7ea5da06c4a399f38b96634edc0787a33da867e43659d03ea8c88edf7601ce22a40c49a64058fc0c2c3fca2c543dd40e7c638e01281cdb7018d20e7a6103

  • SSDEEP

    3072:3hd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JzVQcY:33fOeIv54W6SFKfc9me9v9/JzV

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

51.79.50.122:443

222.124.142.67:10443

138.201.222.158:4664

rc4.plain
rc4.plain

Targets

    • Target

      d71720c008845452b4495510666e737e

    • Size

      184KB

    • MD5

      d71720c008845452b4495510666e737e

    • SHA1

      31aa5bf5c781322f9654091a859fd313522cd066

    • SHA256

      5f1eca557bb74e12d1ce95a2217a3986fe454409b3a4a0c1781056cf003e3fd1

    • SHA512

      b5ea7ea5da06c4a399f38b96634edc0787a33da867e43659d03ea8c88edf7601ce22a40c49a64058fc0c2c3fca2c543dd40e7c638e01281cdb7018d20e7a6103

    • SSDEEP

      3072:3hd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JzVQcY:33fOeIv54W6SFKfc9me9v9/JzV

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks