General

  • Target

    ce2ed72c56e5020b18f4411e82b8cee84b61d8ca862f5b4e4431181c67485ada

  • Size

    160KB

  • Sample

    210627-w7r15enj3n

  • MD5

    8ac921b47c2f68de94df584299c72cb2

  • SHA1

    691ea502ccd40078680774249c39a247129d613b

  • SHA256

    ce2ed72c56e5020b18f4411e82b8cee84b61d8ca862f5b4e4431181c67485ada

  • SHA512

    bcb7a814d4a5fa46221a66575442410666a07ada107de6804460a924b5942f9229026166d30973e87315620081c6dcfbb1a952700f9871e295fc0c071b1383d4

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

94.247.168.64:443

159.203.93.122:8172

50.116.27.97:2303

rc4.plain
rc4.plain

Targets

    • Target

      ce2ed72c56e5020b18f4411e82b8cee84b61d8ca862f5b4e4431181c67485ada

    • Size

      160KB

    • MD5

      8ac921b47c2f68de94df584299c72cb2

    • SHA1

      691ea502ccd40078680774249c39a247129d613b

    • SHA256

      ce2ed72c56e5020b18f4411e82b8cee84b61d8ca862f5b4e4431181c67485ada

    • SHA512

      bcb7a814d4a5fa46221a66575442410666a07ada107de6804460a924b5942f9229026166d30973e87315620081c6dcfbb1a952700f9871e295fc0c071b1383d4

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks