dridex | 722f547179d1c08a2d2f832f931af9efb9dbd4b1d0bb3e0318a73080bbb8aeee | Triage

Sharing

General

Target

722f547179d1c08a2d2f832f931af9efb9dbd4b1d0bb3e0318a73080bbb8aeee
Size

157KB
Sample

210421-ly61p48382
MD5

230eb6323402a803d3805b4e65ed85bd
SHA1

1694283153a33953111bfdd72273e7f649d73c14
SHA256

722f547179d1c08a2d2f832f931af9efb9dbd4b1d0bb3e0318a73080bbb8aeee
SHA512

8606177dbdeb18228176cdf553706ec5145c9b8aeeac16a29bd22430feb1cc23f3915edb49fa226a1a1aa0eb067de8821598175c8110c1e627fa10c535dcabf1

Score

10^/10

dridex 40112 botnet evasion loader trojan

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

159.8.59.82:443

51.91.156.39:2303

67.196.50.240:8172

rc4.plain

rc4.plain

Targets

- Target
  
  722f547179d1c08a2d2f832f931af9efb9dbd4b1d0bb3e0318a73080bbb8aeee
- Size
  
  157KB
- MD5
  
  230eb6323402a803d3805b4e65ed85bd
- SHA1
  
  1694283153a33953111bfdd72273e7f649d73c14
- SHA256
  
  722f547179d1c08a2d2f832f931af9efb9dbd4b1d0bb3e0318a73080bbb8aeee
- SHA512
  
  8606177dbdeb18228176cdf553706ec5145c9b8aeeac16a29bd22430feb1cc23f3915edb49fa226a1a1aa0eb067de8821598175c8110c1e627fa10c535dcabf1
Score

10^/10

dridex 40112 botnet evasion loader trojan
- Dridex
  Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
  botnet dridex
- Dridex Loader
  Detects Dridex both x86 and x64 loader in memory.
  botnet loader
- Checks whether UAC is enabled
  evasion trojan
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

dridex40112botnetevasionloadertrojan