General

  • Target

    0c5e279bd091ad487d84de5c2cf1c318d426edaa8969f9fbceb10428fcfff043

  • Size

    160KB

  • Sample

    210619-z1vz9ty8jx

  • MD5

    4fbd522be2eb568a4f7eb7ef849c327d

  • SHA1

    acbf66ea7b3eca40960c0a1348ff6f017fecd6f9

  • SHA256

    0c5e279bd091ad487d84de5c2cf1c318d426edaa8969f9fbceb10428fcfff043

  • SHA512

    d62fd125e07b19a836686da9424bd84923eb5ea4dc4c0b88c09bb87f993df7683d987815aff58d9e13f096547b1e29fb0b2ee2a2424f0861bf3dc17fa3e48455

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

94.247.168.64:443

159.203.93.122:8172

50.116.27.97:2303

rc4.plain
rc4.plain

Targets

    • Target

      0c5e279bd091ad487d84de5c2cf1c318d426edaa8969f9fbceb10428fcfff043

    • Size

      160KB

    • MD5

      4fbd522be2eb568a4f7eb7ef849c327d

    • SHA1

      acbf66ea7b3eca40960c0a1348ff6f017fecd6f9

    • SHA256

      0c5e279bd091ad487d84de5c2cf1c318d426edaa8969f9fbceb10428fcfff043

    • SHA512

      d62fd125e07b19a836686da9424bd84923eb5ea4dc4c0b88c09bb87f993df7683d987815aff58d9e13f096547b1e29fb0b2ee2a2424f0861bf3dc17fa3e48455

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks