General

  • Target

    376f3bb70461e45e53ed683e937c6ee371afe6a88efbd0c0d89d2e92fe5168bc

  • Size

    158KB

  • Sample

    210623-zjnf1zzlna

  • MD5

    f7e5afe22cd0ff138d98435e8654bb2b

  • SHA1

    ebe51571013125c24ffdde39dc6ec15abd236bf2

  • SHA256

    376f3bb70461e45e53ed683e937c6ee371afe6a88efbd0c0d89d2e92fe5168bc

  • SHA512

    134e29f3a2c15de36b4a5d917254a9debac21f8e54ff1b4d62d66467022c03e8a6ed6adbdcd36d7439e2e1aa45490c99f7ef24f9350d4f61f578f4f4ac7b6eaa

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

8.210.53.215:443

72.249.22.245:2303

188.40.137.206:8172

rc4.plain
rc4.plain

Targets

    • Target

      376f3bb70461e45e53ed683e937c6ee371afe6a88efbd0c0d89d2e92fe5168bc

    • Size

      158KB

    • MD5

      f7e5afe22cd0ff138d98435e8654bb2b

    • SHA1

      ebe51571013125c24ffdde39dc6ec15abd236bf2

    • SHA256

      376f3bb70461e45e53ed683e937c6ee371afe6a88efbd0c0d89d2e92fe5168bc

    • SHA512

      134e29f3a2c15de36b4a5d917254a9debac21f8e54ff1b4d62d66467022c03e8a6ed6adbdcd36d7439e2e1aa45490c99f7ef24f9350d4f61f578f4f4ac7b6eaa

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks