General

  • Target

    77e1c8216ddb94a041b66a4d54d31bdbf3db7d2ea70d3762f97bf53d32cc074e

  • Size

    162KB

  • Sample

    210421-fr4cyev6ts

  • MD5

    894beb091d7d70aa588d2eca4e9e3613

  • SHA1

    92ef4ca59534a6aabe20084a1b9b729d7ccdf1a7

  • SHA256

    77e1c8216ddb94a041b66a4d54d31bdbf3db7d2ea70d3762f97bf53d32cc074e

  • SHA512

    78bc0a0342096d47c70af611c965292e5360323cafb86d4e646f58f408729abec326ce4cf1a5cb12adf774d5a8390b845723f2cd2db7a23fe086ff35259ebf54

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

107.172.227.10:443

172.93.133.123:2303

108.168.61.147:8172

rc4.plain
rc4.plain

Targets

    • Target

      77e1c8216ddb94a041b66a4d54d31bdbf3db7d2ea70d3762f97bf53d32cc074e

    • Size

      162KB

    • MD5

      894beb091d7d70aa588d2eca4e9e3613

    • SHA1

      92ef4ca59534a6aabe20084a1b9b729d7ccdf1a7

    • SHA256

      77e1c8216ddb94a041b66a4d54d31bdbf3db7d2ea70d3762f97bf53d32cc074e

    • SHA512

      78bc0a0342096d47c70af611c965292e5360323cafb86d4e646f58f408729abec326ce4cf1a5cb12adf774d5a8390b845723f2cd2db7a23fe086ff35259ebf54

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks