General

  • Target

    d9ca82405ae71b174f07de2f049ca432

  • Size

    188KB

  • Sample

    240320-zmllhsbg3v

  • MD5

    d9ca82405ae71b174f07de2f049ca432

  • SHA1

    67b5a67688cad18f188c982d8c6aa2cc894fbfb9

  • SHA256

    a5baf577e5e63b9fb3a07ab4a19bec2fcf328d1830e01e8820d03bd5be05ad9e

  • SHA512

    e5a93fc6c0225be0aa77d3d45debde337e7286b006a364d70e99438dd5fa2038a4e4ab8fe03ddbdd5f3f00245410353d63eec97296abca1db63524bc7d44688e

  • SSDEEP

    3072:8A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoWo:8zIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      d9ca82405ae71b174f07de2f049ca432

    • Size

      188KB

    • MD5

      d9ca82405ae71b174f07de2f049ca432

    • SHA1

      67b5a67688cad18f188c982d8c6aa2cc894fbfb9

    • SHA256

      a5baf577e5e63b9fb3a07ab4a19bec2fcf328d1830e01e8820d03bd5be05ad9e

    • SHA512

      e5a93fc6c0225be0aa77d3d45debde337e7286b006a364d70e99438dd5fa2038a4e4ab8fe03ddbdd5f3f00245410353d63eec97296abca1db63524bc7d44688e

    • SSDEEP

      3072:8A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoWo:8zIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks