General

  • Target

    842dc32a03dd64f8a9eb97f7a084d41a4bb818888e52e4682a0a47d035125f1f

  • Size

    188KB

  • Sample

    241221-tr655asnhz

  • MD5

    5d7f3bc1249efcdc620548dce61ff871

  • SHA1

    05f2dfd706e71c675a9d362a4dd191b0f497f45f

  • SHA256

    842dc32a03dd64f8a9eb97f7a084d41a4bb818888e52e4682a0a47d035125f1f

  • SHA512

    63337fbbc1c9b9e4f9e37f1ddf60d1a1bf134629a325357c7709027bd843540fb55e2174549a7a81be219f6abc2110f314376041bf35b5256af96eee7b1a53a9

  • SSDEEP

    3072:QA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo9o:QzIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      842dc32a03dd64f8a9eb97f7a084d41a4bb818888e52e4682a0a47d035125f1f

    • Size

      188KB

    • MD5

      5d7f3bc1249efcdc620548dce61ff871

    • SHA1

      05f2dfd706e71c675a9d362a4dd191b0f497f45f

    • SHA256

      842dc32a03dd64f8a9eb97f7a084d41a4bb818888e52e4682a0a47d035125f1f

    • SHA512

      63337fbbc1c9b9e4f9e37f1ddf60d1a1bf134629a325357c7709027bd843540fb55e2174549a7a81be219f6abc2110f314376041bf35b5256af96eee7b1a53a9

    • SSDEEP

      3072:QA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo9o:QzIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks