General

  • Target

    d253aca6ab6fc05add2b012e7c38b01d408f4fbbcdfa9a485f50df6f449c2dec

  • Size

    158KB

  • Sample

    210620-1kr3tg1z76

  • MD5

    f865fb90b2bbb821f9bb4d9d16368f82

  • SHA1

    b6ba5897f68edb53d3fe5e5870338820f009a357

  • SHA256

    d253aca6ab6fc05add2b012e7c38b01d408f4fbbcdfa9a485f50df6f449c2dec

  • SHA512

    8461fe4d08c3c6c72c4b30c47246f89e8226a76f5bd95a637fe8c6732e1914294317b79f058d166bfc90541d6db3f4c1b791ecb1f542079814d2038a724c88c4

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

8.210.53.215:443

72.249.22.245:2303

188.40.137.206:8172

rc4.plain
rc4.plain

Targets

    • Target

      d253aca6ab6fc05add2b012e7c38b01d408f4fbbcdfa9a485f50df6f449c2dec

    • Size

      158KB

    • MD5

      f865fb90b2bbb821f9bb4d9d16368f82

    • SHA1

      b6ba5897f68edb53d3fe5e5870338820f009a357

    • SHA256

      d253aca6ab6fc05add2b012e7c38b01d408f4fbbcdfa9a485f50df6f449c2dec

    • SHA512

      8461fe4d08c3c6c72c4b30c47246f89e8226a76f5bd95a637fe8c6732e1914294317b79f058d166bfc90541d6db3f4c1b791ecb1f542079814d2038a724c88c4

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks