General

  • Target

    d9b0d4e5809aa648bac9539f21190910f5db0b6ff1a987b8fa692f21a4ea63b7

  • Size

    160KB

  • Sample

    210619-e2y5se77ej

  • MD5

    57dc20496c7061be1b45fe96d3d1fc34

  • SHA1

    9d3d1355d557ccfb509e1aaa40320d1bc362b555

  • SHA256

    d9b0d4e5809aa648bac9539f21190910f5db0b6ff1a987b8fa692f21a4ea63b7

  • SHA512

    a3c25703db5bd161c644e1ad074c2d7d63cae53944f735552419c3d454b77b3bcd46398fe289636aa2b222e98f62d143b9f141709c08190a33a5f630a6940510

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

94.247.168.64:443

159.203.93.122:8172

50.116.27.97:2303

rc4.plain
rc4.plain

Targets

    • Target

      d9b0d4e5809aa648bac9539f21190910f5db0b6ff1a987b8fa692f21a4ea63b7

    • Size

      160KB

    • MD5

      57dc20496c7061be1b45fe96d3d1fc34

    • SHA1

      9d3d1355d557ccfb509e1aaa40320d1bc362b555

    • SHA256

      d9b0d4e5809aa648bac9539f21190910f5db0b6ff1a987b8fa692f21a4ea63b7

    • SHA512

      a3c25703db5bd161c644e1ad074c2d7d63cae53944f735552419c3d454b77b3bcd46398fe289636aa2b222e98f62d143b9f141709c08190a33a5f630a6940510

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks