General

  • Target

    ccd9ab4fdf5cf925dc2d22d480fdb90ffbb5b59777d7c3f676e4d5af67ae1a54

  • Size

    158KB

  • Sample

    210629-qzhwlf8eva

  • MD5

    16c7bb54b54a232a937ed2a0aa1ed784

  • SHA1

    3b6e7a6a50a130c190bb57174c0031bd7cf73207

  • SHA256

    ccd9ab4fdf5cf925dc2d22d480fdb90ffbb5b59777d7c3f676e4d5af67ae1a54

  • SHA512

    735dc5f5be50bcd9e3dbc01de431a0cdd42226080e9c833dc3951a64d73728dbf0825002c1d978fc6088fc11971bae633dfbb105382209244737f4f4bdd80fde

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

8.210.53.215:443

72.249.22.245:2303

188.40.137.206:8172

rc4.plain
rc4.plain

Targets

    • Target

      ccd9ab4fdf5cf925dc2d22d480fdb90ffbb5b59777d7c3f676e4d5af67ae1a54

    • Size

      158KB

    • MD5

      16c7bb54b54a232a937ed2a0aa1ed784

    • SHA1

      3b6e7a6a50a130c190bb57174c0031bd7cf73207

    • SHA256

      ccd9ab4fdf5cf925dc2d22d480fdb90ffbb5b59777d7c3f676e4d5af67ae1a54

    • SHA512

      735dc5f5be50bcd9e3dbc01de431a0cdd42226080e9c833dc3951a64d73728dbf0825002c1d978fc6088fc11971bae633dfbb105382209244737f4f4bdd80fde

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks