General

  • Target

    d9a50f9e17786371329abd6b51f380ab

  • Size

    188KB

  • Sample

    240320-ycgn5sgh77

  • MD5

    d9a50f9e17786371329abd6b51f380ab

  • SHA1

    b08f850d363700b93712bab8b99a0a4a083f734f

  • SHA256

    bd44a8df256f9d32d92312e67781f330a3375c7a6b2b68d99d61f29010ed3555

  • SHA512

    c9e812cd103a49ecc79e84a212ee7e3fcb7fbf8b26d37cbd77dc49c6d2a64d16ecba1a309163d636dff2e495cbb137f56a29db4af869062d7ceedfc80d97ea4f

  • SSDEEP

    3072:dH0uyjZqEpAK+Gf78TBdrXkTM5vhRg9Esf0DwvtyMpVnpA+z6tX8sxKViWt7dU:dUua/Pv7YNhRIEZDeXVpAxtMsxK

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      d9a50f9e17786371329abd6b51f380ab

    • Size

      188KB

    • MD5

      d9a50f9e17786371329abd6b51f380ab

    • SHA1

      b08f850d363700b93712bab8b99a0a4a083f734f

    • SHA256

      bd44a8df256f9d32d92312e67781f330a3375c7a6b2b68d99d61f29010ed3555

    • SHA512

      c9e812cd103a49ecc79e84a212ee7e3fcb7fbf8b26d37cbd77dc49c6d2a64d16ecba1a309163d636dff2e495cbb137f56a29db4af869062d7ceedfc80d97ea4f

    • SSDEEP

      3072:dH0uyjZqEpAK+Gf78TBdrXkTM5vhRg9Esf0DwvtyMpVnpA+z6tX8sxKViWt7dU:dUua/Pv7YNhRIEZDeXVpAxtMsxK

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks