dridex

General

Target
bb521860bf54ea3ba9a6eab8fa87ea21d4c91805940b7cbc08205a89ca2f5404
Size 380KB
Sample210401-qrx7f7e4bn
SHA256 bb521860bf54ea3ba9a6eab8fa87ea21d4c91805940b7cbc08205a89ca2f5404
MD5 e49b6f3489b4071ebe85f3e8a95cd304
SHA1 06733669c34a87b6ec15724df59ab2b01b5f547c
SHA512 9df13b2e7b0f1ccf383ad1ee5ef3e19ce09b77dd5d8869eadbadab457c83bd845d0008647052a8f678b55fbf80af025e3c90b5309d8dc3d15853b730074ece16
MD5 SHA1 SHA512

Score

10^/10

Malware Config

Extracted

Family

dridex

Botnet

10444

C2

131.100.24.215:443
210.65.244.174:6601
195.201.199.53:2303

rc4.plain

Targets

- Target
  bb521860bf54ea3ba9a6eab8fa87ea21d4c91805940b7cbc08205a89ca2f5404
- Size 380KB
- SHA256 bb521860bf54ea3ba9a6eab8fa87ea21d4c91805940b7cbc08205a89ca2f5404
- MD5 e49b6f3489b4071ebe85f3e8a95cd304
- SHA1 06733669c34a87b6ec15724df59ab2b01b5f547c
- SHA512 9df13b2e7b0f1ccf383ad1ee5ef3e19ce09b77dd5d8869eadbadab457c83bd845d0008647052a8f678b55fbf80af025e3c90b5309d8dc3d15853b730074ece16
- MD5 SHA1 SHA512
Score

10^/10

dridex 10444 botnet discovery evasion loader trojan
- Dridex
  Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
  botnet dridex
- Dridex Loader
  Detects Dridex both x86 and x64 loader in memory.
  botnet loader
- Blocklisted process makes network request
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Dridex Loader

Blocklisted process makes network request

Checks installed software on the system

Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2