General

  • Target

    ba83c7c4e7caeaef07d63bef800e88ad1a07238afa25ec2d054e2c42a08e3cd1

  • Size

    160KB

  • Sample

    210629-9gsa175eza

  • MD5

    b310f6f9ee21a7ba3bc1152470e4c3b3

  • SHA1

    46d8c7a7dfed8b5a2ddd9450bd48284c834fcfbf

  • SHA256

    ba83c7c4e7caeaef07d63bef800e88ad1a07238afa25ec2d054e2c42a08e3cd1

  • SHA512

    a9b0d8c98da63c0b121caff24a0c6e8570a98ef4fc5c1ffc7ee3acd4a2b5eb2851bf88a35718163316d272d46e1e0683b7e8958e5931298f90115a00c7562494

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

94.247.168.64:443

159.203.93.122:8172

50.116.27.97:2303

rc4.plain
rc4.plain

Targets

    • Target

      ba83c7c4e7caeaef07d63bef800e88ad1a07238afa25ec2d054e2c42a08e3cd1

    • Size

      160KB

    • MD5

      b310f6f9ee21a7ba3bc1152470e4c3b3

    • SHA1

      46d8c7a7dfed8b5a2ddd9450bd48284c834fcfbf

    • SHA256

      ba83c7c4e7caeaef07d63bef800e88ad1a07238afa25ec2d054e2c42a08e3cd1

    • SHA512

      a9b0d8c98da63c0b121caff24a0c6e8570a98ef4fc5c1ffc7ee3acd4a2b5eb2851bf88a35718163316d272d46e1e0683b7e8958e5931298f90115a00c7562494

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks