9806149fae2b752cd5ea4dcb39001b552bea7b41d5343d813e27fb0bf81cdcd0

General
Target

9806149fae2b752cd5ea4dcb39001b552bea7b41d5343d813e27fb0bf81cdcd0

Size

158KB

Sample

210421-a7cctsc476

Score
10 /10
MD5

639c7327f54952bbceec3b0af1bf2565

SHA1

8b2fec238ec46498d13b4bc0d4b14154bbbcd21b

SHA256

9806149fae2b752cd5ea4dcb39001b552bea7b41d5343d813e27fb0bf81cdcd0

SHA512

cb76cd399910bfad65fa71cd65baa07461605a3485eec695ef09a97310487a75baf3b44f4af41114efe751abc6fcef65266a4f540ea7d60da8ab236cbfcdf5a0

Malware Config

Extracted

Family dridex
Botnet 40112
C2

8.210.53.215:443

72.249.22.245:2303

188.40.137.206:8172

rc4.plain
rc4.plain
Targets
Target

9806149fae2b752cd5ea4dcb39001b552bea7b41d5343d813e27fb0bf81cdcd0

MD5

639c7327f54952bbceec3b0af1bf2565

Filesize

158KB

Score
10 /10
SHA1

8b2fec238ec46498d13b4bc0d4b14154bbbcd21b

SHA256

9806149fae2b752cd5ea4dcb39001b552bea7b41d5343d813e27fb0bf81cdcd0

SHA512

cb76cd399910bfad65fa71cd65baa07461605a3485eec695ef09a97310487a75baf3b44f4af41114efe751abc6fcef65266a4f540ea7d60da8ab236cbfcdf5a0

Tags

Signatures

  • Dridex

    Description

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    Tags

  • Dridex Loader

    Description

    Detects Dridex both x86 and x64 loader in memory.

    Tags

  • Checks whether UAC is enabled

    Tags

    TTPs

    System Information Discovery

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Execution
            Exfiltration
              Impact
                Initial Access
                  Lateral Movement
                    Persistence
                      Privilege Escalation
                        Tasks

                        static1