General

  • Target

    210571e421884535f1e644011dc381f6a6bcb3d6b3ee291d5522b453fef1fb18

  • Size

    158KB

  • Sample

    210619-aw8q5jcgrn

  • MD5

    c4ec0581f687f0a0da99d361c0a65e2d

  • SHA1

    bfc409736d3d2aeef14a16a313be5294cc22cc61

  • SHA256

    210571e421884535f1e644011dc381f6a6bcb3d6b3ee291d5522b453fef1fb18

  • SHA512

    cf1a2aac819e6d68707aa2687a765ce4d8e17f428e82c264467a296430f5d3cf8a99537cb8b857d71396e0736436acbb61744aa8e6fda2c808ea86afd8dbb2f0

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

8.210.53.215:443

72.249.22.245:2303

188.40.137.206:8172

rc4.plain
rc4.plain

Targets

    • Target

      210571e421884535f1e644011dc381f6a6bcb3d6b3ee291d5522b453fef1fb18

    • Size

      158KB

    • MD5

      c4ec0581f687f0a0da99d361c0a65e2d

    • SHA1

      bfc409736d3d2aeef14a16a313be5294cc22cc61

    • SHA256

      210571e421884535f1e644011dc381f6a6bcb3d6b3ee291d5522b453fef1fb18

    • SHA512

      cf1a2aac819e6d68707aa2687a765ce4d8e17f428e82c264467a296430f5d3cf8a99537cb8b857d71396e0736436acbb61744aa8e6fda2c808ea86afd8dbb2f0

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks