General
-
Target
https://exitmagall.xyz/iduew73
-
Sample
210611-9qr8m4rems
Score
10/10
Malware Config
Extracted
Family
dridex
Botnet
10111
C2
91.200.186.229:19226
91.191.172.124:13783
rc4.plain
rc4.plain
Targets
-
-
Target
https://exitmagall.xyz/iduew73
Score10/10-
Dridex
Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
-
CryptOne packer
Detects CryptOne packer defined in NCC blogpost.
-
Blocklisted process makes network request
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Program crash
-