General

  • Target

    acd709e47b5d5da1af81caf1db2505538f547a208887d4cef210fd48048b028b

  • Size

    160KB

  • Sample

    210619-wesjvjwc5n

  • MD5

    9f987932c31ab6a6ac521bf3a7118181

  • SHA1

    b42843c2903838ac2438e00192212171e4a24c79

  • SHA256

    acd709e47b5d5da1af81caf1db2505538f547a208887d4cef210fd48048b028b

  • SHA512

    78783fcc4758c6550aafe62b7e6a91eb5f978a691c8a0cba70d233c2a0a4116d64dcba37388f45d748bf555160fdb57c878cb2ae9423f9a177f785e328a475ab

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

94.247.168.64:443

159.203.93.122:8172

50.116.27.97:2303

rc4.plain
rc4.plain

Targets

    • Target

      acd709e47b5d5da1af81caf1db2505538f547a208887d4cef210fd48048b028b

    • Size

      160KB

    • MD5

      9f987932c31ab6a6ac521bf3a7118181

    • SHA1

      b42843c2903838ac2438e00192212171e4a24c79

    • SHA256

      acd709e47b5d5da1af81caf1db2505538f547a208887d4cef210fd48048b028b

    • SHA512

      78783fcc4758c6550aafe62b7e6a91eb5f978a691c8a0cba70d233c2a0a4116d64dcba37388f45d748bf555160fdb57c878cb2ae9423f9a177f785e328a475ab

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks