General

  • Target

    7a65f8a7f815d24cbaa410cbe08a7f51c2eb1efe15dc07be1ebc603038a071f3

  • Size

    161KB

  • Sample

    210421-jq2p41gsrj

  • MD5

    37596c7e0d572b40a336fa29ce62efcc

  • SHA1

    1b28d590333f00dd7caed35f2dbd2ed60ef4bc28

  • SHA256

    7a65f8a7f815d24cbaa410cbe08a7f51c2eb1efe15dc07be1ebc603038a071f3

  • SHA512

    a1510734f1e230925bd932573a3f7e68a58b6d383af30a00a789eb012ba81cbd30130aec4035718353d417637138b429f9c8a43e195669244deeca5dc52d7508

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

107.172.227.10:443

172.93.133.123:2303

108.168.61.147:8172

rc4.plain
rc4.plain

Targets

    • Target

      7a65f8a7f815d24cbaa410cbe08a7f51c2eb1efe15dc07be1ebc603038a071f3

    • Size

      161KB

    • MD5

      37596c7e0d572b40a336fa29ce62efcc

    • SHA1

      1b28d590333f00dd7caed35f2dbd2ed60ef4bc28

    • SHA256

      7a65f8a7f815d24cbaa410cbe08a7f51c2eb1efe15dc07be1ebc603038a071f3

    • SHA512

      a1510734f1e230925bd932573a3f7e68a58b6d383af30a00a789eb012ba81cbd30130aec4035718353d417637138b429f9c8a43e195669244deeca5dc52d7508

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks