General

  • Target

    5ed1ea5100c8826ae2acf656d90c279dad7ea46f36498d8413e02a5054a6043e

  • Size

    160KB

  • Sample

    210628-dgfya6cnpa

  • MD5

    986141ee572e1242c82e1b16166912a0

  • SHA1

    8d2c34f3e0611b2b7fab5f132853358733fa9e8c

  • SHA256

    5ed1ea5100c8826ae2acf656d90c279dad7ea46f36498d8413e02a5054a6043e

  • SHA512

    efbf645cdadb0c7092b0e5d28262aec28d7f208015da2437590534d0028bedc5fac69fd985230412bcee3db5a273a265dc8694e775fd2011e4120d484fd023a8

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

94.247.168.64:443

159.203.93.122:8172

50.116.27.97:2303

rc4.plain
rc4.plain

Targets

    • Target

      5ed1ea5100c8826ae2acf656d90c279dad7ea46f36498d8413e02a5054a6043e

    • Size

      160KB

    • MD5

      986141ee572e1242c82e1b16166912a0

    • SHA1

      8d2c34f3e0611b2b7fab5f132853358733fa9e8c

    • SHA256

      5ed1ea5100c8826ae2acf656d90c279dad7ea46f36498d8413e02a5054a6043e

    • SHA512

      efbf645cdadb0c7092b0e5d28262aec28d7f208015da2437590534d0028bedc5fac69fd985230412bcee3db5a273a265dc8694e775fd2011e4120d484fd023a8

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks