General

  • Target

    5dd5543a9ec16b3959e5a21bd85b6823

  • Size

    175KB

  • Sample

    210726-ll76hv58q2

  • MD5

    5dd5543a9ec16b3959e5a21bd85b6823

  • SHA1

    40fec7d5e5fe9026dc207330625951001afa2900

  • SHA256

    b2bcb01b2c4755ae460bcd5d2b80bac2b487c6496f9d2db34a0f84a3ffe6084e

  • SHA512

    25e7d867ab4ad3abad2b3ef57529b6cd1953966415533b2b85f25c07c571339b99b927c50b425abb739ac23bcbd3c1d13492f4fc6fb7e86067b0532d1372a6ad

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

45.79.33.48:443

139.162.202.74:5007

68.183.216.174:7443

rc4.plain
rc4.plain

Targets

    • Target

      5dd5543a9ec16b3959e5a21bd85b6823

    • Size

      175KB

    • MD5

      5dd5543a9ec16b3959e5a21bd85b6823

    • SHA1

      40fec7d5e5fe9026dc207330625951001afa2900

    • SHA256

      b2bcb01b2c4755ae460bcd5d2b80bac2b487c6496f9d2db34a0f84a3ffe6084e

    • SHA512

      25e7d867ab4ad3abad2b3ef57529b6cd1953966415533b2b85f25c07c571339b99b927c50b425abb739ac23bcbd3c1d13492f4fc6fb7e86067b0532d1372a6ad

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Matrix ATT&CK v6

Discovery

System Information Discovery

1
T1082

Tasks