General

  • Target

    415777da7c971c5f4238621efc3322b2a25ea9500901fad4e48e7ed0149623ad

  • Size

    160KB

  • Sample

    210629-mgh1v4j7hn

  • MD5

    4cbcbc58e7f770365435e773bca41f2f

  • SHA1

    f604ebbf5bb8501874baee1a0c513b20349e96ff

  • SHA256

    415777da7c971c5f4238621efc3322b2a25ea9500901fad4e48e7ed0149623ad

  • SHA512

    816456e03184959c5170d5b4984f985b0ce8641a5093b812f1ec0694ca53f529b5728da5b6b4b48a2ad9c426a4cd2e51fe4d10761a6d72ca3c288e7df6813edc

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

94.247.168.64:443

159.203.93.122:8172

50.116.27.97:2303

rc4.plain
rc4.plain

Targets

    • Target

      415777da7c971c5f4238621efc3322b2a25ea9500901fad4e48e7ed0149623ad

    • Size

      160KB

    • MD5

      4cbcbc58e7f770365435e773bca41f2f

    • SHA1

      f604ebbf5bb8501874baee1a0c513b20349e96ff

    • SHA256

      415777da7c971c5f4238621efc3322b2a25ea9500901fad4e48e7ed0149623ad

    • SHA512

      816456e03184959c5170d5b4984f985b0ce8641a5093b812f1ec0694ca53f529b5728da5b6b4b48a2ad9c426a4cd2e51fe4d10761a6d72ca3c288e7df6813edc

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks