General

  • Target

    6e3a0913232203fb4037da8a3458567ab4503c32079c8c9bd886414eae14c38d

  • Size

    162KB

  • Sample

    210629-q21lfgkngs

  • MD5

    0c21b84cf634e36f6e8c85b34bef582c

  • SHA1

    83296d5cc7010f2de6e4847eaf113b0fb2e8caa5

  • SHA256

    6e3a0913232203fb4037da8a3458567ab4503c32079c8c9bd886414eae14c38d

  • SHA512

    83ee6af7eeda985f4724a7310c36b8da2c4b76eb2d5e5e826f424bbd665c6b8525cbf74661b9fb1d664685b45a92c37a8010fa4d13dc1d8eea44d461d0f5153a

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

107.172.227.10:443

172.93.133.123:2303

108.168.61.147:8172

rc4.plain
rc4.plain

Targets

    • Target

      6e3a0913232203fb4037da8a3458567ab4503c32079c8c9bd886414eae14c38d

    • Size

      162KB

    • MD5

      0c21b84cf634e36f6e8c85b34bef582c

    • SHA1

      83296d5cc7010f2de6e4847eaf113b0fb2e8caa5

    • SHA256

      6e3a0913232203fb4037da8a3458567ab4503c32079c8c9bd886414eae14c38d

    • SHA512

      83ee6af7eeda985f4724a7310c36b8da2c4b76eb2d5e5e826f424bbd665c6b8525cbf74661b9fb1d664685b45a92c37a8010fa4d13dc1d8eea44d461d0f5153a

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks