General
-
Target
https://exitmagall.xyz/iduew73
-
Sample
210701-vjg5t6h6ma
Score
10/10
Malware Config
Extracted
Family
dridex
Botnet
10111
C2
104.168.155.129:443
142.4.219.173:4664
176.31.117.84:9443
rc4.plain
rc4.plain
Targets
-
-
Target
https://exitmagall.xyz/iduew73
Score10/10-
Dridex
Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
-
CryptOne packer
Detects CryptOne packer defined in NCC blogpost.
-
Blocklisted process makes network request
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-