General

  • Target

    850f9202cc7dd3d86d7b9e5ae20f572c7d52ac4030ea44b3548d593b6f0130b2

  • Size

    162KB

  • Sample

    210629-zbnk78yk8x

  • MD5

    656b4912216527edb26d2cf5968ad5d0

  • SHA1

    6dc5754bdb84afcd1e9b649dd135dbb3f8c0eb3f

  • SHA256

    850f9202cc7dd3d86d7b9e5ae20f572c7d52ac4030ea44b3548d593b6f0130b2

  • SHA512

    a3c8c73d291c27e2d24865e5b6af08c202abf28b9ba3fc744db3783e201f8a186133c0cdf08631052c644cc6c3e02151999e05f72e90fb789d6af137e33c1bd0

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

107.172.227.10:443

172.93.133.123:2303

108.168.61.147:8172

rc4.plain
rc4.plain

Targets

    • Target

      850f9202cc7dd3d86d7b9e5ae20f572c7d52ac4030ea44b3548d593b6f0130b2

    • Size

      162KB

    • MD5

      656b4912216527edb26d2cf5968ad5d0

    • SHA1

      6dc5754bdb84afcd1e9b649dd135dbb3f8c0eb3f

    • SHA256

      850f9202cc7dd3d86d7b9e5ae20f572c7d52ac4030ea44b3548d593b6f0130b2

    • SHA512

      a3c8c73d291c27e2d24865e5b6af08c202abf28b9ba3fc744db3783e201f8a186133c0cdf08631052c644cc6c3e02151999e05f72e90fb789d6af137e33c1bd0

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks