General

  • Target

    0c2140f32177f18f3c542c72e8972c8ad06d7a6dfd194f9e6fe200be47d3d328

  • Size

    162KB

  • Sample

    210621-5bzclk48ys

  • MD5

    cb26af48026542b43df938cb39b9a55e

  • SHA1

    0b722c1846d085185ccc8408209627545e831a87

  • SHA256

    0c2140f32177f18f3c542c72e8972c8ad06d7a6dfd194f9e6fe200be47d3d328

  • SHA512

    7643dc2a9161fcf7e49b15ef8b012625403b95ff61f803f391db7d163f6fceeb1297dd3c0bb60aed95449695f6d37215e4058261ccd618c077122a5ef4bd4e36

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

107.172.227.10:443

172.93.133.123:2303

108.168.61.147:8172

rc4.plain
rc4.plain

Targets

    • Target

      0c2140f32177f18f3c542c72e8972c8ad06d7a6dfd194f9e6fe200be47d3d328

    • Size

      162KB

    • MD5

      cb26af48026542b43df938cb39b9a55e

    • SHA1

      0b722c1846d085185ccc8408209627545e831a87

    • SHA256

      0c2140f32177f18f3c542c72e8972c8ad06d7a6dfd194f9e6fe200be47d3d328

    • SHA512

      7643dc2a9161fcf7e49b15ef8b012625403b95ff61f803f391db7d163f6fceeb1297dd3c0bb60aed95449695f6d37215e4058261ccd618c077122a5ef4bd4e36

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks