General

  • Target

    7e13eff4c3a9967a9a5bec081ba9935772dddac785d1224fa6d5c728a7301752

  • Size

    160KB

  • Sample

    210618-s4ekqf7wej

  • MD5

    c07278b2575aaa2436395c329db34541

  • SHA1

    46ae8dd758bc63db9fc762c8c23d8b3b2cd3c326

  • SHA256

    7e13eff4c3a9967a9a5bec081ba9935772dddac785d1224fa6d5c728a7301752

  • SHA512

    e084eeb02eac161bcab45146576a230fdb0feda4297f71ac058284858a55d32b4502a83a225251794eab041dd480b9bc3cf3c65fa73b34ca5fb6a237be94fcb6

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

94.247.168.64:443

159.203.93.122:8172

50.116.27.97:2303

rc4.plain
rc4.plain

Targets

    • Target

      7e13eff4c3a9967a9a5bec081ba9935772dddac785d1224fa6d5c728a7301752

    • Size

      160KB

    • MD5

      c07278b2575aaa2436395c329db34541

    • SHA1

      46ae8dd758bc63db9fc762c8c23d8b3b2cd3c326

    • SHA256

      7e13eff4c3a9967a9a5bec081ba9935772dddac785d1224fa6d5c728a7301752

    • SHA512

      e084eeb02eac161bcab45146576a230fdb0feda4297f71ac058284858a55d32b4502a83a225251794eab041dd480b9bc3cf3c65fa73b34ca5fb6a237be94fcb6

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks