dridex | 827a50e824419d119d8bbb6f5d30036cb95c298b7931eac387138f57a91c1574 | Triage

Sharing

General

Target

94b2da6df1df4fc542a1c9b71a3a756c_JaffaCakes118
Size

204KB
Sample

240604-nrkn8sfc99
MD5

94b2da6df1df4fc542a1c9b71a3a756c
SHA1

4c2f47dd106a10eca3f945ebf0472a7cfedec20a
SHA256

827a50e824419d119d8bbb6f5d30036cb95c298b7931eac387138f57a91c1574
SHA512

25d114fe22441a662ca090be8b15bcab9b5a5117eb68a82e0a56a1c572c3e34253a6058eafef72b947d0ce0df61924f3ff4a65b1e4ec419738575597ef4ecd8f
SSDEEP

1536:0cb8FY3nIlQyneIcy0tvVK7p567zK4nneW5OkHVvQawIvXZRk6b/6FI/hmHkP/Yk:02Abne3yr67uIPHBQawkHrw6hXSNdK

Score

10^/10

dridex botnet

Malware Config

Extracted

Family

dridex

C2

104.236.212.82:443

46.101.162.161:1801

109.73.52.188:3389

185.86.148.222:1801

Targets

- Target
  
  94b2da6df1df4fc542a1c9b71a3a756c_JaffaCakes118
- Size
  
  204KB
- MD5
  
  94b2da6df1df4fc542a1c9b71a3a756c
- SHA1
  
  4c2f47dd106a10eca3f945ebf0472a7cfedec20a
- SHA256
  
  827a50e824419d119d8bbb6f5d30036cb95c298b7931eac387138f57a91c1574
- SHA512
  
  25d114fe22441a662ca090be8b15bcab9b5a5117eb68a82e0a56a1c572c3e34253a6058eafef72b947d0ce0df61924f3ff4a65b1e4ec419738575597ef4ecd8f
- SSDEEP
  
  1536:0cb8FY3nIlQyneIcy0tvVK7p567zK4nneW5OkHVvQawIvXZRk6b/6FI/hmHkP/Yk:02Abne3yr67uIPHBQawkHrw6hXSNdK
Score

10^/10

dridex botnet
- Dridex
  Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
  botnet dridex
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2