General

  • Target

    6732f742549c6414495df7d73be16f399ccf37c204bb7574b42c8c956b876a72

  • Size

    158KB

  • Sample

    210628-lb3ndwxtjj

  • MD5

    49add46c164695f0901cd095f17af309

  • SHA1

    d90bcf8492ffb615b36af65cd0beee743cd46a2d

  • SHA256

    6732f742549c6414495df7d73be16f399ccf37c204bb7574b42c8c956b876a72

  • SHA512

    4b4f2d92e4832f381a31c21d35e7cfb4ddefec121aeb02d9d5e25f93fcddb934f13407d523a483cb793fdaf02c5696a71547fe302a29f92fa87aaf280506f769

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

8.210.53.215:443

72.249.22.245:2303

188.40.137.206:8172

rc4.plain
rc4.plain

Targets

    • Target

      6732f742549c6414495df7d73be16f399ccf37c204bb7574b42c8c956b876a72

    • Size

      158KB

    • MD5

      49add46c164695f0901cd095f17af309

    • SHA1

      d90bcf8492ffb615b36af65cd0beee743cd46a2d

    • SHA256

      6732f742549c6414495df7d73be16f399ccf37c204bb7574b42c8c956b876a72

    • SHA512

      4b4f2d92e4832f381a31c21d35e7cfb4ddefec121aeb02d9d5e25f93fcddb934f13407d523a483cb793fdaf02c5696a71547fe302a29f92fa87aaf280506f769

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks