General

  • Target

    0e1cc47b1b0c036d627274b5f272cf1167e31053caaecd929b7273ed648f9ba0

  • Size

    158KB

  • Sample

    210621-m7ecpb51kn

  • MD5

    e20292894e6454997ef3448048ba690a

  • SHA1

    f181b0038ed706d699625d02a37db2299f17cd8f

  • SHA256

    0e1cc47b1b0c036d627274b5f272cf1167e31053caaecd929b7273ed648f9ba0

  • SHA512

    39171038640d7581275b71806f9bdfb9ec5f05d5073450ca710e27adeae076030325cbd0bb1160f14e959d4422e8269c2666d041d0b342c143d9ec7b0586332f

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

8.210.53.215:443

72.249.22.245:2303

188.40.137.206:8172

rc4.plain
rc4.plain

Targets

    • Target

      0e1cc47b1b0c036d627274b5f272cf1167e31053caaecd929b7273ed648f9ba0

    • Size

      158KB

    • MD5

      e20292894e6454997ef3448048ba690a

    • SHA1

      f181b0038ed706d699625d02a37db2299f17cd8f

    • SHA256

      0e1cc47b1b0c036d627274b5f272cf1167e31053caaecd929b7273ed648f9ba0

    • SHA512

      39171038640d7581275b71806f9bdfb9ec5f05d5073450ca710e27adeae076030325cbd0bb1160f14e959d4422e8269c2666d041d0b342c143d9ec7b0586332f

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Matrix ATT&CK v6

Discovery

System Information Discovery

1
T1082

Tasks