General

  • Target

    3bfc4707e5764be0c21184b54e79f239b5db85ab191544d2206f18a885435081

  • Size

    162KB

  • Sample

    210622-kkmhx77f1x

  • MD5

    40bfb0791252f5849f3c5309c4b3af9d

  • SHA1

    44e89c5bcc37616071b8ce68eea08dd60960a589

  • SHA256

    3bfc4707e5764be0c21184b54e79f239b5db85ab191544d2206f18a885435081

  • SHA512

    962b85d44683d83cdf8cefc1648a1f6b4f40cef4db7c3237ee99958be005164c068fd95b01227476e09230426391242d8ffc2ca8d22dc7264e79c87b565f031a

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

107.172.227.10:443

172.93.133.123:2303

108.168.61.147:8172

rc4.plain
rc4.plain

Targets

    • Target

      3bfc4707e5764be0c21184b54e79f239b5db85ab191544d2206f18a885435081

    • Size

      162KB

    • MD5

      40bfb0791252f5849f3c5309c4b3af9d

    • SHA1

      44e89c5bcc37616071b8ce68eea08dd60960a589

    • SHA256

      3bfc4707e5764be0c21184b54e79f239b5db85ab191544d2206f18a885435081

    • SHA512

      962b85d44683d83cdf8cefc1648a1f6b4f40cef4db7c3237ee99958be005164c068fd95b01227476e09230426391242d8ffc2ca8d22dc7264e79c87b565f031a

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks