dridex | acefbe6236bd41f651ab8764318b5447b01b8f2b206a0bfa5be79f7eaa2ccf18 | Triage

Sharing

General

Target

acefbe6236bd41f651ab8764318b5447b01b8f2b206a0bfa5be79f7eaa2ccf18
Size

157KB
Sample

210421-hspl6gzw2j
MD5

50ebf3587770a3182745e9d3710cda61
SHA1

c5fd188e63eebd57984851698b0f586a29a146b8
SHA256

acefbe6236bd41f651ab8764318b5447b01b8f2b206a0bfa5be79f7eaa2ccf18
SHA512

64d5a29c885a8b59c2ce6749002ec77c8c2a29f91d6aee0afcd56b8c943ce03220c500a659a002c60c734f8ab5f0c9b120610e954f30d3a1db48e206f5cd30e2

Score

10^/10

dridex 40112 botnet evasion loader trojan

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

159.8.59.82:443

51.91.156.39:2303

67.196.50.240:8172

rc4.plain

rc4.plain

Targets

- Target
  
  acefbe6236bd41f651ab8764318b5447b01b8f2b206a0bfa5be79f7eaa2ccf18
- Size
  
  157KB
- MD5
  
  50ebf3587770a3182745e9d3710cda61
- SHA1
  
  c5fd188e63eebd57984851698b0f586a29a146b8
- SHA256
  
  acefbe6236bd41f651ab8764318b5447b01b8f2b206a0bfa5be79f7eaa2ccf18
- SHA512
  
  64d5a29c885a8b59c2ce6749002ec77c8c2a29f91d6aee0afcd56b8c943ce03220c500a659a002c60c734f8ab5f0c9b120610e954f30d3a1db48e206f5cd30e2
Score

10^/10

dridex 40112 botnet evasion loader trojan
- Dridex
  Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
  botnet dridex
- Dridex Loader
  Detects Dridex both x86 and x64 loader in memory.
  botnet loader
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

dridex40112botnetevasionloadertrojan

behavioral2

dridex40112botnetevasionloadertrojan