7f1e32b1d7c1651970cb8176de3794ce1d28da0fe366564af595b9d7e3804ffd

General
Target

7f1e32b1d7c1651970cb8176de3794ce1d28da0fe366564af595b9d7e3804ffd

Size

158KB

Sample

210504-aj1q3knvh2

Score
10 /10
MD5

8dd6d0157b513d25a5044e38a61fac1c

SHA1

407ede03c7b423ec0955df1c899cc8ed0e17f3a2

SHA256

7f1e32b1d7c1651970cb8176de3794ce1d28da0fe366564af595b9d7e3804ffd

SHA512

ab295c98bf75cf8872f5f101d1b35195ec09e207ef7fb1bc095822128842dcfb13beb2e885c7f08b2548319ca5aecd484379ef7ac77e5793ce21e851f9700da5

Malware Config

Extracted

Family dridex
Botnet 40112
C2

8.210.53.215:443

72.249.22.245:2303

188.40.137.206:8172

rc4.plain
rc4.plain
Targets
Target

7f1e32b1d7c1651970cb8176de3794ce1d28da0fe366564af595b9d7e3804ffd

MD5

8dd6d0157b513d25a5044e38a61fac1c

Filesize

158KB

Score
10 /10
SHA1

407ede03c7b423ec0955df1c899cc8ed0e17f3a2

SHA256

7f1e32b1d7c1651970cb8176de3794ce1d28da0fe366564af595b9d7e3804ffd

SHA512

ab295c98bf75cf8872f5f101d1b35195ec09e207ef7fb1bc095822128842dcfb13beb2e885c7f08b2548319ca5aecd484379ef7ac77e5793ce21e851f9700da5

Tags

Signatures

  • Dridex

    Description

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    Tags

  • Dridex Loader

    Description

    Detects Dridex both x86 and x64 loader in memory.

    Tags

  • Checks whether UAC is enabled

    Tags

    TTPs

    System Information Discovery

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Execution
            Exfiltration
              Impact
                Initial Access
                  Lateral Movement
                    Persistence
                      Privilege Escalation
                        Tasks

                        static1