General

  • Target

    2e8e789ab2432d5bc7cf223ec51ca70b6ce238503843cb3c7029e473ef90dffc

  • Size

    162KB

  • Sample

    210421-hjvn7vkxjj

  • MD5

    f7e92bb5d52f483cd0c204449b25fed9

  • SHA1

    a96f185bb540a609d5cfb301218aa0891873916e

  • SHA256

    2e8e789ab2432d5bc7cf223ec51ca70b6ce238503843cb3c7029e473ef90dffc

  • SHA512

    52a2d892d560a9ac1bda4a925b2f3c5d53dd2ce84a4721ddcbfd7fe7d1b4a562ec3bdd18b763d2fc44de32cc89e0bcdd8c8c03f4d7f93587834f658c2e2c89c6

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

107.172.227.10:443

172.93.133.123:2303

108.168.61.147:8172

rc4.plain
rc4.plain

Targets

    • Target

      2e8e789ab2432d5bc7cf223ec51ca70b6ce238503843cb3c7029e473ef90dffc

    • Size

      162KB

    • MD5

      f7e92bb5d52f483cd0c204449b25fed9

    • SHA1

      a96f185bb540a609d5cfb301218aa0891873916e

    • SHA256

      2e8e789ab2432d5bc7cf223ec51ca70b6ce238503843cb3c7029e473ef90dffc

    • SHA512

      52a2d892d560a9ac1bda4a925b2f3c5d53dd2ce84a4721ddcbfd7fe7d1b4a562ec3bdd18b763d2fc44de32cc89e0bcdd8c8c03f4d7f93587834f658c2e2c89c6

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks