General

  • Target

    e906b20e94f014cf8f7703b44c180b46e743e6d75ca8399c10d71a40424977f3

  • Size

    160KB

  • Sample

    210628-75yn2pnr2s

  • MD5

    122e570abd1b897c0485b985ca84961a

  • SHA1

    a6ea22255da39505f956289ce3075d8cfb20ef97

  • SHA256

    e906b20e94f014cf8f7703b44c180b46e743e6d75ca8399c10d71a40424977f3

  • SHA512

    6f86eee76f6d9f9073b33c43f5786d9e02a433e96d29fd03f477a25f5532459cc394bd651408c76035f4a2a46f30d959ca5b4a11d8fafd129ae20bcf697eb242

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

94.247.168.64:443

159.203.93.122:8172

50.116.27.97:2303

rc4.plain
rc4.plain

Targets

    • Target

      e906b20e94f014cf8f7703b44c180b46e743e6d75ca8399c10d71a40424977f3

    • Size

      160KB

    • MD5

      122e570abd1b897c0485b985ca84961a

    • SHA1

      a6ea22255da39505f956289ce3075d8cfb20ef97

    • SHA256

      e906b20e94f014cf8f7703b44c180b46e743e6d75ca8399c10d71a40424977f3

    • SHA512

      6f86eee76f6d9f9073b33c43f5786d9e02a433e96d29fd03f477a25f5532459cc394bd651408c76035f4a2a46f30d959ca5b4a11d8fafd129ae20bcf697eb242

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks