dridex | cbc3412f8553db6cb47c2c88ae8232c7ff940de23ae605af7d71bff4b01430b4 | Triage

Sharing

General

Target

cbc3412f8553db6cb47c2c88ae8232c7ff940de23ae605af7d71bff4b01430b4
Size

154KB
Sample

210421-cy3f54wqpx
MD5

f52b550cdf42b9350a0e447d1203efed
SHA1

0938e88782df479da7aa16566b976e456ae43e20
SHA256

cbc3412f8553db6cb47c2c88ae8232c7ff940de23ae605af7d71bff4b01430b4
SHA512

4e28f7d4c4293f952c9c8ab880b8724d02b9a538e462ea2ceffcf1ad1be413c0f09e8e4db99b59b902580f49685fc2a4fa5fa27ddb170106f63abaaf810780ab

Score

10^/10

dridex 40111 botnet evasion loader trojan

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

159.8.59.82:443

51.91.156.39:2303

67.196.50.240:8172

rc4.plain

rc4.plain

Targets

- Target
  
  cbc3412f8553db6cb47c2c88ae8232c7ff940de23ae605af7d71bff4b01430b4
- Size
  
  154KB
- MD5
  
  f52b550cdf42b9350a0e447d1203efed
- SHA1
  
  0938e88782df479da7aa16566b976e456ae43e20
- SHA256
  
  cbc3412f8553db6cb47c2c88ae8232c7ff940de23ae605af7d71bff4b01430b4
- SHA512
  
  4e28f7d4c4293f952c9c8ab880b8724d02b9a538e462ea2ceffcf1ad1be413c0f09e8e4db99b59b902580f49685fc2a4fa5fa27ddb170106f63abaaf810780ab
Score

10^/10

dridex 40111 botnet evasion loader trojan
- Dridex
  Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
  botnet dridex
- Dridex Loader
  Detects Dridex both x86 and x64 loader in memory.
  botnet loader
- Checks whether UAC is enabled
  evasion trojan
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

dridex40111botnetevasionloadertrojan