General

  • Target

    e962c6daf257a19855570c4a1c2ea07aaa7d6ff18cefc24e8b516df74d086d8f

  • Size

    160KB

  • Sample

    210628-67w5rwq3y2

  • MD5

    b2f0e9cac6b6511a0fc9fe29b24b05ac

  • SHA1

    4d4c063028de13efc6b0db3d6e706bc56464a1eb

  • SHA256

    e962c6daf257a19855570c4a1c2ea07aaa7d6ff18cefc24e8b516df74d086d8f

  • SHA512

    0cce514e906c65e9e6a596c84ee7736e37f5e1aad6659e438b046bc871a7a2d4295d359a43ef711bcc2416040a97bc628f57e820e01aff7bd80fdbc72a2c7515

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

94.247.168.64:443

159.203.93.122:8172

50.116.27.97:2303

rc4.plain
rc4.plain

Targets

    • Target

      e962c6daf257a19855570c4a1c2ea07aaa7d6ff18cefc24e8b516df74d086d8f

    • Size

      160KB

    • MD5

      b2f0e9cac6b6511a0fc9fe29b24b05ac

    • SHA1

      4d4c063028de13efc6b0db3d6e706bc56464a1eb

    • SHA256

      e962c6daf257a19855570c4a1c2ea07aaa7d6ff18cefc24e8b516df74d086d8f

    • SHA512

      0cce514e906c65e9e6a596c84ee7736e37f5e1aad6659e438b046bc871a7a2d4295d359a43ef711bcc2416040a97bc628f57e820e01aff7bd80fdbc72a2c7515

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks