General

  • Target

    071ca9dc858bae966be331074d573f35204b4759606b9845c7a170bd19d99458

  • Size

    158KB

  • Sample

    210618-t294bcrxaj

  • MD5

    db4a09b6c6799b33ff83f6eba31ee28c

  • SHA1

    b788d4154355045152b9a7a49148cc267cfea691

  • SHA256

    071ca9dc858bae966be331074d573f35204b4759606b9845c7a170bd19d99458

  • SHA512

    4f1dcac55512238da886beb509bb049c4394163912c4f2ffd30aaa21ddb7543c1eb25c294b2b48d057a9e04a790bf5dce4e4e6634e75576f91fd682d92b5403b

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

8.210.53.215:443

72.249.22.245:2303

188.40.137.206:8172

rc4.plain
rc4.plain

Targets

    • Target

      071ca9dc858bae966be331074d573f35204b4759606b9845c7a170bd19d99458

    • Size

      158KB

    • MD5

      db4a09b6c6799b33ff83f6eba31ee28c

    • SHA1

      b788d4154355045152b9a7a49148cc267cfea691

    • SHA256

      071ca9dc858bae966be331074d573f35204b4759606b9845c7a170bd19d99458

    • SHA512

      4f1dcac55512238da886beb509bb049c4394163912c4f2ffd30aaa21ddb7543c1eb25c294b2b48d057a9e04a790bf5dce4e4e6634e75576f91fd682d92b5403b

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks