General

  • Target

    dc8f3a12af7b6521b853c1b26a4819c94fb6ca291684cf29db652e1517c0086c

  • Size

    158KB

  • Sample

    210624-lxab4l46rx

  • MD5

    e54e21cb9c5ec03f0b64453f9419ecf4

  • SHA1

    fd6eb0a8b4c5e02c57678cd8892e047193b1f4a5

  • SHA256

    dc8f3a12af7b6521b853c1b26a4819c94fb6ca291684cf29db652e1517c0086c

  • SHA512

    9aff4a2864d5283da868c9da40264d0136800ef59b753f1dd4dc5f8a63eb67243b2aa727fce6ba8e7f5371d2d2c28ef0dfeadacc5b56b8602be440a6c1084d71

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

8.210.53.215:443

72.249.22.245:2303

188.40.137.206:8172

rc4.plain
rc4.plain

Targets

    • Target

      dc8f3a12af7b6521b853c1b26a4819c94fb6ca291684cf29db652e1517c0086c

    • Size

      158KB

    • MD5

      e54e21cb9c5ec03f0b64453f9419ecf4

    • SHA1

      fd6eb0a8b4c5e02c57678cd8892e047193b1f4a5

    • SHA256

      dc8f3a12af7b6521b853c1b26a4819c94fb6ca291684cf29db652e1517c0086c

    • SHA512

      9aff4a2864d5283da868c9da40264d0136800ef59b753f1dd4dc5f8a63eb67243b2aa727fce6ba8e7f5371d2d2c28ef0dfeadacc5b56b8602be440a6c1084d71

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Matrix ATT&CK v6

Discovery

System Information Discovery

1
T1082

Tasks