General

  • Target

    c3757caf8aef0e70c12842f5f0907fc88d2b5e7e9f058149f5e1d3e87dcd3039

  • Size

    162KB

  • Sample

    210629-5jhv7q1xbj

  • MD5

    14374996ca203026110c06fb471a6044

  • SHA1

    74d2f058e5cf5ccbf37372f65baca9714ef383ec

  • SHA256

    c3757caf8aef0e70c12842f5f0907fc88d2b5e7e9f058149f5e1d3e87dcd3039

  • SHA512

    378be25404861dd3de83ffc1826f342d4f3aefe6b6b3e90483e96a8873d828956022e150a19a8f14f700a9010b84726ad49d88e84e43585d5024e007ac71b33e

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

107.172.227.10:443

172.93.133.123:2303

108.168.61.147:8172

rc4.plain
rc4.plain

Targets

    • Target

      c3757caf8aef0e70c12842f5f0907fc88d2b5e7e9f058149f5e1d3e87dcd3039

    • Size

      162KB

    • MD5

      14374996ca203026110c06fb471a6044

    • SHA1

      74d2f058e5cf5ccbf37372f65baca9714ef383ec

    • SHA256

      c3757caf8aef0e70c12842f5f0907fc88d2b5e7e9f058149f5e1d3e87dcd3039

    • SHA512

      378be25404861dd3de83ffc1826f342d4f3aefe6b6b3e90483e96a8873d828956022e150a19a8f14f700a9010b84726ad49d88e84e43585d5024e007ac71b33e

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks