General

  • Target

    cd01389def76d7a37f7acd2fec115900a64b9f14d873e943fe43e595557c9d57

  • Size

    158KB

  • Sample

    210628-m1kcjln8xx

  • MD5

    fb0fe3931a36cf0919941424e1b8bfaa

  • SHA1

    7fe928752c67a0eb4ad3422d847e518795542ba9

  • SHA256

    cd01389def76d7a37f7acd2fec115900a64b9f14d873e943fe43e595557c9d57

  • SHA512

    167bfbefea63e80f2547733ef1944bb21977e75db378961a9fe69f726801df4334129f6b81b4a37fac68ca661bf1af817830ed4c6e026ecff790f4fdd8d56fe4

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

8.210.53.215:443

72.249.22.245:2303

188.40.137.206:8172

rc4.plain
rc4.plain

Targets

    • Target

      cd01389def76d7a37f7acd2fec115900a64b9f14d873e943fe43e595557c9d57

    • Size

      158KB

    • MD5

      fb0fe3931a36cf0919941424e1b8bfaa

    • SHA1

      7fe928752c67a0eb4ad3422d847e518795542ba9

    • SHA256

      cd01389def76d7a37f7acd2fec115900a64b9f14d873e943fe43e595557c9d57

    • SHA512

      167bfbefea63e80f2547733ef1944bb21977e75db378961a9fe69f726801df4334129f6b81b4a37fac68ca661bf1af817830ed4c6e026ecff790f4fdd8d56fe4

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks