General

  • Target

    3f1861729bc6b6770bcf590128755adbc180f893062263203b70a0614d3eb76e

  • Size

    160KB

  • Sample

    210626-zsrddttdts

  • MD5

    fde2c57ac5dab3869832a33387e51a3a

  • SHA1

    eb0e47d34f01985902f9cd499bd51c284ebfb268

  • SHA256

    3f1861729bc6b6770bcf590128755adbc180f893062263203b70a0614d3eb76e

  • SHA512

    d86ac36290448c73e58bacb5aaa802a0c3a3e62236dcbc00e3dc7dbd07d1678702d811b130f68e0504fba2cdf229d2559bec6e2089f3253ee1a2aa951fefd132

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

94.247.168.64:443

159.203.93.122:8172

50.116.27.97:2303

rc4.plain
rc4.plain

Targets

    • Target

      3f1861729bc6b6770bcf590128755adbc180f893062263203b70a0614d3eb76e

    • Size

      160KB

    • MD5

      fde2c57ac5dab3869832a33387e51a3a

    • SHA1

      eb0e47d34f01985902f9cd499bd51c284ebfb268

    • SHA256

      3f1861729bc6b6770bcf590128755adbc180f893062263203b70a0614d3eb76e

    • SHA512

      d86ac36290448c73e58bacb5aaa802a0c3a3e62236dcbc00e3dc7dbd07d1678702d811b130f68e0504fba2cdf229d2559bec6e2089f3253ee1a2aa951fefd132

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks