General

  • Target

    d82c77dfa804e63126436277c1099931

  • Size

    188KB

  • Sample

    240320-hs6p7sbb53

  • MD5

    d82c77dfa804e63126436277c1099931

  • SHA1

    de89d08f8cc882ceb9fc469fb55a4e5e1bcf178a

  • SHA256

    43d79203408b5fdfc9efd1f91213cbd7313117e34516f4222d11069ac56f9e84

  • SHA512

    b56775b5216786e5c0806e79b9ea75bbf459704e50ca870f09366eb79b54c67fb8a6f8f76ff2dd1f4764664abd6fbcc30b7123fd7b5f75f69202e76f866999e8

  • SSDEEP

    3072:VA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoao:VzIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      d82c77dfa804e63126436277c1099931

    • Size

      188KB

    • MD5

      d82c77dfa804e63126436277c1099931

    • SHA1

      de89d08f8cc882ceb9fc469fb55a4e5e1bcf178a

    • SHA256

      43d79203408b5fdfc9efd1f91213cbd7313117e34516f4222d11069ac56f9e84

    • SHA512

      b56775b5216786e5c0806e79b9ea75bbf459704e50ca870f09366eb79b54c67fb8a6f8f76ff2dd1f4764664abd6fbcc30b7123fd7b5f75f69202e76f866999e8

    • SSDEEP

      3072:VA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoao:VzIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks