General

  • Target

    213fe9b9265c740c5a2392f38f2c7f9b9471fffff53e58c7eabcbc4a7beedb59

  • Size

    136KB

  • Sample

    220612-k5r4pabac6

  • MD5

    ade38b776e42062ba169c3b4597918a7

  • SHA1

    be1638fc2d88e00524321e03f24adeb49a9211c3

  • SHA256

    213fe9b9265c740c5a2392f38f2c7f9b9471fffff53e58c7eabcbc4a7beedb59

  • SHA512

    ccfb2216e517db191e1f9660307b9842b2b2d5ea3b4265b9e35092a92b590e44e3c8c70b29821c06ee7da717b18e8cc5224b055c71b985fc56c6224903f49d27

Malware Config

Extracted

Family

dridex

C2

64.87.26.17:443

192.241.220.155:1801

142.4.198.252:3389

216.98.148.156:1801

Targets

    • Target

      213fe9b9265c740c5a2392f38f2c7f9b9471fffff53e58c7eabcbc4a7beedb59

    • Size

      136KB

    • MD5

      ade38b776e42062ba169c3b4597918a7

    • SHA1

      be1638fc2d88e00524321e03f24adeb49a9211c3

    • SHA256

      213fe9b9265c740c5a2392f38f2c7f9b9471fffff53e58c7eabcbc4a7beedb59

    • SHA512

      ccfb2216e517db191e1f9660307b9842b2b2d5ea3b4265b9e35092a92b590e44e3c8c70b29821c06ee7da717b18e8cc5224b055c71b985fc56c6224903f49d27

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks