General

  • Target

    6050987768d6ed2345d9db317880e8e8126944714dd4b478b93292e08c9635a6

  • Size

    162KB

  • Sample

    210628-63pmy29gks

  • MD5

    805df97612cdafa297159eeb6b7e97a1

  • SHA1

    a7483b6e42880cf12c5892a08e4f621f3fb08856

  • SHA256

    6050987768d6ed2345d9db317880e8e8126944714dd4b478b93292e08c9635a6

  • SHA512

    699861525c61cb80a2e4b8fa254ab2990ff97105f6419192984c8af81ca7016a9c72687d99589e8f8f712c0305a485d17057b0d70560acd499055525b4413c48

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

107.172.227.10:443

172.93.133.123:2303

108.168.61.147:8172

rc4.plain
rc4.plain

Targets

    • Target

      6050987768d6ed2345d9db317880e8e8126944714dd4b478b93292e08c9635a6

    • Size

      162KB

    • MD5

      805df97612cdafa297159eeb6b7e97a1

    • SHA1

      a7483b6e42880cf12c5892a08e4f621f3fb08856

    • SHA256

      6050987768d6ed2345d9db317880e8e8126944714dd4b478b93292e08c9635a6

    • SHA512

      699861525c61cb80a2e4b8fa254ab2990ff97105f6419192984c8af81ca7016a9c72687d99589e8f8f712c0305a485d17057b0d70560acd499055525b4413c48

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks