dridex | 213fe9b9265c740c5a2392f38f2c7f9b9471fffff53e58c7eabcbc4a7beedb59 | Triage

Sharing

General

Target

213fe9b9265c740c5a2392f38f2c7f9b9471fffff53e58c7eabcbc4a7beedb59
Size

136KB
Sample

220612-k5r4pabac6
MD5

ade38b776e42062ba169c3b4597918a7
SHA1

be1638fc2d88e00524321e03f24adeb49a9211c3
SHA256

213fe9b9265c740c5a2392f38f2c7f9b9471fffff53e58c7eabcbc4a7beedb59
SHA512

ccfb2216e517db191e1f9660307b9842b2b2d5ea3b4265b9e35092a92b590e44e3c8c70b29821c06ee7da717b18e8cc5224b055c71b985fc56c6224903f49d27

Score

10^/10

dridex botnet evasion trojan

Malware Config

Extracted

Family

dridex

C2

64.87.26.17:443

192.241.220.155:1801

142.4.198.252:3389

216.98.148.156:1801

Targets

- Target
  
  213fe9b9265c740c5a2392f38f2c7f9b9471fffff53e58c7eabcbc4a7beedb59
- Size
  
  136KB
- MD5
  
  ade38b776e42062ba169c3b4597918a7
- SHA1
  
  be1638fc2d88e00524321e03f24adeb49a9211c3
- SHA256
  
  213fe9b9265c740c5a2392f38f2c7f9b9471fffff53e58c7eabcbc4a7beedb59
- SHA512
  
  ccfb2216e517db191e1f9660307b9842b2b2d5ea3b4265b9e35092a92b590e44e3c8c70b29821c06ee7da717b18e8cc5224b055c71b985fc56c6224903f49d27
Score

10^/10

dridex botnet evasion trojan
- Dridex
  Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
  botnet dridex
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

behavioral2

dridexbotnetevasiontrojan