General

  • Target

    074f6056a1942ddc7bc68e29828e44a59b4c6331f8e33b4769355a1e089924c7

  • Size

    160KB

  • Sample

    210620-8ejkj74gna

  • MD5

    70b5767d34ca17d51bf49e7835b53f49

  • SHA1

    5eb612c17419704c735546d2c5e4ab5b587fd3ff

  • SHA256

    074f6056a1942ddc7bc68e29828e44a59b4c6331f8e33b4769355a1e089924c7

  • SHA512

    8e4af90608fac142cf35851a6b628b5a746154c3409c7b922d56959d71e14f18a9a2ea66de7897b2ae6d2feb67e11eedeeb324016d22f4b1383012c2b2f5a77e

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

94.247.168.64:443

159.203.93.122:8172

50.116.27.97:2303

rc4.plain
rc4.plain

Targets

    • Target

      074f6056a1942ddc7bc68e29828e44a59b4c6331f8e33b4769355a1e089924c7

    • Size

      160KB

    • MD5

      70b5767d34ca17d51bf49e7835b53f49

    • SHA1

      5eb612c17419704c735546d2c5e4ab5b587fd3ff

    • SHA256

      074f6056a1942ddc7bc68e29828e44a59b4c6331f8e33b4769355a1e089924c7

    • SHA512

      8e4af90608fac142cf35851a6b628b5a746154c3409c7b922d56959d71e14f18a9a2ea66de7897b2ae6d2feb67e11eedeeb324016d22f4b1383012c2b2f5a77e

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks