dridex | 93d6836e2d6392698b8e0fff5f36846f4c3b4e87a8c9587097208ead1ef61b27 | Triage

Sharing

General

Target

93d6836e2d6392698b8e0fff5f36846f4c3b4e87a8c9587097208ead1ef61b27
Size

157KB
Sample

210421-k69rr29bga
MD5

22a23703e73346d3d66812db5bb53009
SHA1

13ee8ce58662610ca1f67bb8905b413f4b76b252
SHA256

93d6836e2d6392698b8e0fff5f36846f4c3b4e87a8c9587097208ead1ef61b27
SHA512

f644724cd69498145c5b6df7a8df645f2718bcff1ee45c252814ad9f84f317683dcd205d664d2fa1494f58fa090302afa69bb5f754c4a1547566cecfb85cb74b

Score

10^/10

dridex 40112 botnet evasion loader trojan

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

159.8.59.82:443

51.91.156.39:2303

67.196.50.240:8172

rc4.plain

rc4.plain

Targets

- Target
  
  93d6836e2d6392698b8e0fff5f36846f4c3b4e87a8c9587097208ead1ef61b27
- Size
  
  157KB
- MD5
  
  22a23703e73346d3d66812db5bb53009
- SHA1
  
  13ee8ce58662610ca1f67bb8905b413f4b76b252
- SHA256
  
  93d6836e2d6392698b8e0fff5f36846f4c3b4e87a8c9587097208ead1ef61b27
- SHA512
  
  f644724cd69498145c5b6df7a8df645f2718bcff1ee45c252814ad9f84f317683dcd205d664d2fa1494f58fa090302afa69bb5f754c4a1547566cecfb85cb74b
Score

10^/10

dridex 40112 botnet evasion loader trojan
- Dridex
  Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
  botnet dridex
- Dridex Loader
  Detects Dridex both x86 and x64 loader in memory.
  botnet loader
- Checks whether UAC is enabled
  evasion trojan
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

dridex40112botnetevasionloadertrojan