General

  • Target

    7160909ee47f610348c7296d6a3d77f2974c76fb036be1dc71413ed00ebccdcf

  • Size

    158KB

  • Sample

    210629-tpsfkgk6z2

  • MD5

    cbf0ad1de573e6889d341d17f8ada868

  • SHA1

    7ea5331d8d2de6a0fe1148b1999f1ebd8a7b3392

  • SHA256

    7160909ee47f610348c7296d6a3d77f2974c76fb036be1dc71413ed00ebccdcf

  • SHA512

    57631b31ea353388a41cf3eaa96444b7a1f86502bde4ed5da79f67d8eedb2bfbe4e2c58ae9a355e1a26575e8d0ff87b8d311d7c208bbe52f7fb04b53629fcd28

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

8.210.53.215:443

72.249.22.245:2303

188.40.137.206:8172

rc4.plain
rc4.plain

Targets

    • Target

      7160909ee47f610348c7296d6a3d77f2974c76fb036be1dc71413ed00ebccdcf

    • Size

      158KB

    • MD5

      cbf0ad1de573e6889d341d17f8ada868

    • SHA1

      7ea5331d8d2de6a0fe1148b1999f1ebd8a7b3392

    • SHA256

      7160909ee47f610348c7296d6a3d77f2974c76fb036be1dc71413ed00ebccdcf

    • SHA512

      57631b31ea353388a41cf3eaa96444b7a1f86502bde4ed5da79f67d8eedb2bfbe4e2c58ae9a355e1a26575e8d0ff87b8d311d7c208bbe52f7fb04b53629fcd28

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks