General

  • Target

    d769adb2ce987cfb692552a5a4726e9b

  • Size

    188KB

  • Sample

    240320-acf6lsbh9v

  • MD5

    d769adb2ce987cfb692552a5a4726e9b

  • SHA1

    53872d0f6deb0c1dede0e568d7fac7c6878d8f34

  • SHA256

    4895478c41f1644625e5e343bd238b298fc25aefe0bf8978ba9ea6c5ad77868a

  • SHA512

    ee7961a562faa3ada170f4e0e408462d5d346f66976fdbbe99d3cc2efbdb91769d14dff2bcafe67f997ef0d3ca993b14340de3c26d54d3b6125bc578170bfd74

  • SSDEEP

    3072:bA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo7o:bzIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      d769adb2ce987cfb692552a5a4726e9b

    • Size

      188KB

    • MD5

      d769adb2ce987cfb692552a5a4726e9b

    • SHA1

      53872d0f6deb0c1dede0e568d7fac7c6878d8f34

    • SHA256

      4895478c41f1644625e5e343bd238b298fc25aefe0bf8978ba9ea6c5ad77868a

    • SHA512

      ee7961a562faa3ada170f4e0e408462d5d346f66976fdbbe99d3cc2efbdb91769d14dff2bcafe67f997ef0d3ca993b14340de3c26d54d3b6125bc578170bfd74

    • SSDEEP

      3072:bA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo7o:bzIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks