ce95b70b8926b7f825ad4bb35b2d159c337b3b28acc223764bffb1232569801e

General
Target

ce95b70b8926b7f825ad4bb35b2d159c337b3b28acc223764bffb1232569801e

Size

162KB

Sample

210504-7725fkvx6x

Score
10 /10
MD5

e1d0e35b624212f901c6ad42beaaf040

SHA1

b6978f6ea183968e49825318f88982b67a233b89

SHA256

ce95b70b8926b7f825ad4bb35b2d159c337b3b28acc223764bffb1232569801e

SHA512

e6cbe61dd75f1c9e3f27c1842949e1e8225efba3035a761bd9c01266510c58cba2f969713e1df25cfa9c979c9b9fe4d0490723369c70ccf1381dd4e0a5abcfa2

Malware Config

Extracted

Family dridex
Botnet 40112
C2

107.172.227.10:443

172.93.133.123:2303

108.168.61.147:8172

rc4.plain
rc4.plain
Targets
Target

ce95b70b8926b7f825ad4bb35b2d159c337b3b28acc223764bffb1232569801e

MD5

e1d0e35b624212f901c6ad42beaaf040

Filesize

162KB

Score
10 /10
SHA1

b6978f6ea183968e49825318f88982b67a233b89

SHA256

ce95b70b8926b7f825ad4bb35b2d159c337b3b28acc223764bffb1232569801e

SHA512

e6cbe61dd75f1c9e3f27c1842949e1e8225efba3035a761bd9c01266510c58cba2f969713e1df25cfa9c979c9b9fe4d0490723369c70ccf1381dd4e0a5abcfa2

Tags

Signatures

  • Dridex

    Description

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    Tags

  • Dridex Loader

    Description

    Detects Dridex both x86 and x64 loader in memory.

    Tags

  • Checks whether UAC is enabled

    Tags

    TTPs

    System Information Discovery

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Execution
            Exfiltration
              Impact
                Initial Access
                  Lateral Movement
                    Persistence
                      Privilege Escalation
                        Tasks

                        static1