General

  • Target

    961abb2c28f823a327d726253106c836d930960a8bad6889e670388df9789fce

  • Size

    160KB

  • Sample

    210628-h3d6a8wwyj

  • MD5

    d488d182f51b14430526bf08ee42486e

  • SHA1

    0fb3062fb8e90aab8a9b32e2c7ea4095e9556d41

  • SHA256

    961abb2c28f823a327d726253106c836d930960a8bad6889e670388df9789fce

  • SHA512

    b1bed164021cc7b5241727494051da8e4067d8fe85b727bacd3587f274ad641fbd8d28d16ecc8297f83742363aa05e948825ab2bae7d2dab3aca80beeadbed28

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

94.247.168.64:443

159.203.93.122:8172

50.116.27.97:2303

rc4.plain
rc4.plain

Targets

    • Target

      961abb2c28f823a327d726253106c836d930960a8bad6889e670388df9789fce

    • Size

      160KB

    • MD5

      d488d182f51b14430526bf08ee42486e

    • SHA1

      0fb3062fb8e90aab8a9b32e2c7ea4095e9556d41

    • SHA256

      961abb2c28f823a327d726253106c836d930960a8bad6889e670388df9789fce

    • SHA512

      b1bed164021cc7b5241727494051da8e4067d8fe85b727bacd3587f274ad641fbd8d28d16ecc8297f83742363aa05e948825ab2bae7d2dab3aca80beeadbed28

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks