Overview

overview

10

Static

static

3

ca1e203e99...52.exe

windows7-x64

10

ca1e203e99...52.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ca1e203e99a7a1ecd9e600817ed39952

  • Size

    1.1MB

  • Sample

    240315-bprnjsfa99

  • MD5

    ca1e203e99a7a1ecd9e600817ed39952

  • SHA1

    1c87c04044b90de0166f3567e7d785e5eca9c4a2

  • SHA256

    14b6a1ccca8848e28a0c5b0d4db0cf32958df8102a3c35f6266a3af0f24354fe

  • SHA512

    3d5aa0e671dfd5137af509f641bd8cb92180094129328aa6f65c7ea121fce5e88cd816cec8ec062ee69b82d05b894d25de6dd784630e2e49ae4ce629d40789a2

  • SSDEEP

    6144:zK6cyPiWCgknQ/HuyIzuTVzsMM56519p+6yT1+ga1td0HZOUlcR9fc:zM+ZdkmHubeaCo6Lga1QHZbO9

Score
10/10
dridex10111botnetdiscoveryevasiontrojan

Malware Config

Extracted

Family

dridex

Botnet

10111

C2

177.52.173.20:9043

192.100.170.1:10172

166.62.103.55:7443
rc4.plain
rc4.plain

Targets

    • Target

      ca1e203e99a7a1ecd9e600817ed39952

    • Size

      1.1MB

    • MD5

      ca1e203e99a7a1ecd9e600817ed39952

    • SHA1

      1c87c04044b90de0166f3567e7d785e5eca9c4a2

    • SHA256

      14b6a1ccca8848e28a0c5b0d4db0cf32958df8102a3c35f6266a3af0f24354fe

    • SHA512

      3d5aa0e671dfd5137af509f641bd8cb92180094129328aa6f65c7ea121fce5e88cd816cec8ec062ee69b82d05b894d25de6dd784630e2e49ae4ce629d40789a2

    • SSDEEP

      6144:zK6cyPiWCgknQ/HuyIzuTVzsMM56519p+6yT1+ga1td0HZOUlcR9fc:zM+ZdkmHubeaCo6Lga1QHZbO9

    Score
    10/10
    dridex10111botnetdiscoveryevasiontrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks