General

  • Target

    7b20c6d3fac78ee283c31d88a09ba349cafc3451ecaef8cf7771499b5e9bc262

  • Size

    158KB

  • Sample

    210622-7attg97vfn

  • MD5

    062db1c56fc08431dfd2d0566e776559

  • SHA1

    f70722746706107b6946e72d09ee71e8b7026603

  • SHA256

    7b20c6d3fac78ee283c31d88a09ba349cafc3451ecaef8cf7771499b5e9bc262

  • SHA512

    a335ed3d5b6bcece2e61ef2028506c8cab903d4841db60a3217f02711b432a9bbfb8304d31aa449517eb21bd163da3f687bf85ca7f5bf2c950a0fd302c12959e

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

8.210.53.215:443

72.249.22.245:2303

188.40.137.206:8172

rc4.plain
rc4.plain

Targets

    • Target

      7b20c6d3fac78ee283c31d88a09ba349cafc3451ecaef8cf7771499b5e9bc262

    • Size

      158KB

    • MD5

      062db1c56fc08431dfd2d0566e776559

    • SHA1

      f70722746706107b6946e72d09ee71e8b7026603

    • SHA256

      7b20c6d3fac78ee283c31d88a09ba349cafc3451ecaef8cf7771499b5e9bc262

    • SHA512

      a335ed3d5b6bcece2e61ef2028506c8cab903d4841db60a3217f02711b432a9bbfb8304d31aa449517eb21bd163da3f687bf85ca7f5bf2c950a0fd302c12959e

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks