dridex | efdf8ac787b1311fb1688edb04e2de6e6ff5ad9886e632ef34c51b277383f2b3 | Triage

Sharing

General

Target

efdf8ac787b1311fb1688edb04e2de6e6ff5ad9886e632ef34c51b277383f2b3
Size

154KB
Sample

210421-6y6c7qjlyj
MD5

80fa56e4fad23b91da02f6cf5bab5f4a
SHA1

3c28853e72d73c8fc33036f1634a777606286b39
SHA256

efdf8ac787b1311fb1688edb04e2de6e6ff5ad9886e632ef34c51b277383f2b3
SHA512

804096c8e1cc218bc6787f39edfabcdf136355720da334d7a1e3ec819a8824878c892d50e540fa9c6bfa7bfd41c4abbb2ee84cbc98802f52fba9073a3c5bd017

Score

10^/10

dridex 40111 botnet evasion loader trojan

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

159.8.59.82:443

51.91.156.39:2303

67.196.50.240:8172

rc4.plain

rc4.plain

Targets

- Target
  
  efdf8ac787b1311fb1688edb04e2de6e6ff5ad9886e632ef34c51b277383f2b3
- Size
  
  154KB
- MD5
  
  80fa56e4fad23b91da02f6cf5bab5f4a
- SHA1
  
  3c28853e72d73c8fc33036f1634a777606286b39
- SHA256
  
  efdf8ac787b1311fb1688edb04e2de6e6ff5ad9886e632ef34c51b277383f2b3
- SHA512
  
  804096c8e1cc218bc6787f39edfabcdf136355720da334d7a1e3ec819a8824878c892d50e540fa9c6bfa7bfd41c4abbb2ee84cbc98802f52fba9073a3c5bd017
Score

10^/10

dridex 40111 botnet evasion loader trojan
- Dridex
  Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
  botnet dridex
- Dridex Loader
  Detects Dridex both x86 and x64 loader in memory.
  botnet loader
- Checks whether UAC is enabled
  evasion trojan
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

dridex40111botnetevasionloadertrojan