General

  • Target

    d7a975c2f30a98ff9fb44bc642a2a719

  • Size

    188KB

  • Sample

    240320-c1nayaef95

  • MD5

    d7a975c2f30a98ff9fb44bc642a2a719

  • SHA1

    9d6efd2582a5d46c9c117bb0085760aaa3f5e710

  • SHA256

    550fa3d65b84086587505b78c22fe192f5bd98ff13c646385246ee33e34064a3

  • SHA512

    6e054d99b01bf7eb19031a5b0aed1ca29e97af0a4a1a0309c808c510b9c45819d8e3f0c4a9efa1996d27362f321d05855630014497305cf9523d8b702629650b

  • SSDEEP

    3072:FH0uyjZqEpAK+Gf78TBdrXkTM5vhRg9Esf0DwvtyMpVnpA+z6tX8sxKViWo7dU:FUua/Pv7YNhRIEZDeXVpAxtMsxK

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      d7a975c2f30a98ff9fb44bc642a2a719

    • Size

      188KB

    • MD5

      d7a975c2f30a98ff9fb44bc642a2a719

    • SHA1

      9d6efd2582a5d46c9c117bb0085760aaa3f5e710

    • SHA256

      550fa3d65b84086587505b78c22fe192f5bd98ff13c646385246ee33e34064a3

    • SHA512

      6e054d99b01bf7eb19031a5b0aed1ca29e97af0a4a1a0309c808c510b9c45819d8e3f0c4a9efa1996d27362f321d05855630014497305cf9523d8b702629650b

    • SSDEEP

      3072:FH0uyjZqEpAK+Gf78TBdrXkTM5vhRg9Esf0DwvtyMpVnpA+z6tX8sxKViWo7dU:FUua/Pv7YNhRIEZDeXVpAxtMsxK

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks