General

  • Target

    134ce396a76d6dce19ee3dcfa7931028f0ce93dd1a7a7f1b28c5e859e32359d0

  • Size

    162KB

  • Sample

    210624-cqk6n9b91e

  • MD5

    8107307404253ea6d428320c0b4d47e1

  • SHA1

    1178b64bf6837fccfe18772984e89d1794bb9280

  • SHA256

    134ce396a76d6dce19ee3dcfa7931028f0ce93dd1a7a7f1b28c5e859e32359d0

  • SHA512

    6b33ab9b1d3e6df2dcc5c27d8e371ae9f8f292e6fc8017747e85802deb6dcf9b5f8ebdbdfa12d7244c8ef976283e04e824b6c2950c57fdea6280c0d90b7806c6

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

107.172.227.10:443

172.93.133.123:2303

108.168.61.147:8172

rc4.plain
rc4.plain

Targets

    • Target

      134ce396a76d6dce19ee3dcfa7931028f0ce93dd1a7a7f1b28c5e859e32359d0

    • Size

      162KB

    • MD5

      8107307404253ea6d428320c0b4d47e1

    • SHA1

      1178b64bf6837fccfe18772984e89d1794bb9280

    • SHA256

      134ce396a76d6dce19ee3dcfa7931028f0ce93dd1a7a7f1b28c5e859e32359d0

    • SHA512

      6b33ab9b1d3e6df2dcc5c27d8e371ae9f8f292e6fc8017747e85802deb6dcf9b5f8ebdbdfa12d7244c8ef976283e04e824b6c2950c57fdea6280c0d90b7806c6

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Matrix ATT&CK v6

Discovery

System Information Discovery

1
T1082

Tasks