General

  • Target

    d8e72ae8b60023a2ebeff417f87cbb7e

  • Size

    188KB

  • Sample

    240320-qmapkshd59

  • MD5

    d8e72ae8b60023a2ebeff417f87cbb7e

  • SHA1

    6989d00b37486e3b1be28a49f4944cf5c3288d32

  • SHA256

    b6d05bb99e7f3b07b9cadd957355d96dbe83e0379925a0feec165fadccc056ba

  • SHA512

    70e32e89f30c964f4d334a76289b33092595a819c00c39827c5ac1ac6e8ff592735be401f25cbc279c372470a27a75794fd96dd1f68a06e2aeb0e535cc4f17bf

  • SSDEEP

    3072:mA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAovo:mzIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      d8e72ae8b60023a2ebeff417f87cbb7e

    • Size

      188KB

    • MD5

      d8e72ae8b60023a2ebeff417f87cbb7e

    • SHA1

      6989d00b37486e3b1be28a49f4944cf5c3288d32

    • SHA256

      b6d05bb99e7f3b07b9cadd957355d96dbe83e0379925a0feec165fadccc056ba

    • SHA512

      70e32e89f30c964f4d334a76289b33092595a819c00c39827c5ac1ac6e8ff592735be401f25cbc279c372470a27a75794fd96dd1f68a06e2aeb0e535cc4f17bf

    • SSDEEP

      3072:mA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAovo:mzIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks