General

  • Target

    bc63d67778288ef118522e27332974d8b5c56ead6b41b6796e3e8880a6957c06

  • Size

    158KB

  • Sample

    210622-5g8qcqzy2x

  • MD5

    a0995ed9f9cc4be14dee9694cbd438be

  • SHA1

    ba230a9a57ac0f409197d1c61d90558f08ddbae3

  • SHA256

    bc63d67778288ef118522e27332974d8b5c56ead6b41b6796e3e8880a6957c06

  • SHA512

    559a1ed9d036846e9803aab81db3625c4fbe3890325f21417572bf2e3a1b880a551e415e42aa5b5a46fee429fccdba783c33b330c19e4ebe1b132d9646006030

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

8.210.53.215:443

72.249.22.245:2303

188.40.137.206:8172

rc4.plain
rc4.plain

Targets

    • Target

      bc63d67778288ef118522e27332974d8b5c56ead6b41b6796e3e8880a6957c06

    • Size

      158KB

    • MD5

      a0995ed9f9cc4be14dee9694cbd438be

    • SHA1

      ba230a9a57ac0f409197d1c61d90558f08ddbae3

    • SHA256

      bc63d67778288ef118522e27332974d8b5c56ead6b41b6796e3e8880a6957c06

    • SHA512

      559a1ed9d036846e9803aab81db3625c4fbe3890325f21417572bf2e3a1b880a551e415e42aa5b5a46fee429fccdba783c33b330c19e4ebe1b132d9646006030

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks