dridex | 7accfc1b47e4350a698a0b2ae38ee9cfeda58616540d128aa89fec43edf68bbb | Triage

Sharing

General

Target

7accfc1b47e4350a698a0b2ae38ee9cfeda58616540d128aa89fec43edf68bbb
Size

119KB
Sample

240417-qcqcaagf48
MD5

598528bffde2673ff1c1bf9b2e3ab4a4
SHA1

30a78f5a280a96323cce5c260b6318f799d38942
SHA256

7accfc1b47e4350a698a0b2ae38ee9cfeda58616540d128aa89fec43edf68bbb
SHA512

8b73a6146813a9efb4aef560a7dc501c60b912c5d348b92c0d41b42e3863769e54648c5386dbe07fb4db675dc141c22946dd2a97f66c903d6273a4c85c262470
SSDEEP

3072:boiWKyZLjHCaDkK7Q4HJb2fXwQb/h0poWEIJxF9:fYZf137Q4pbeXT/hG1

Score

10^/10

dridex botnet evasion trojan

Malware Config

Extracted

Family

dridex

C2

188.165.45.228:443

213.252.245.31:443

94.140.125.17:443

Targets

- Target
  
  741087126c1c7edec3d0a3bc3f490723a4f410e9a278444c812e7f79013bb996.exe
- Size
  
  184KB
- MD5
  
  0ef5c94779cd7861b5e872cd5e922311
- SHA1
  
  5b4b7a6f33d3188ae5211a4432d2a5c84c1da10e
- SHA256
  
  741087126c1c7edec3d0a3bc3f490723a4f410e9a278444c812e7f79013bb996
- SHA512
  
  5fa2ecc5185a0a3751135b16e315b69f38ddbbf55eb3f3207311a0ed5cb3ee7127253340466e63a3a3b13a956c5019bc19376dba7d3b590f95146bf2dd170f3b
- SSDEEP
  
  3072:Z/+Z4dcDXE3y6EgZkqfSk79TKP8mlSruPeco7QC:Z/+Z4dcDhrgZ36kxKTlSqPbo7
Score

10^/10

dridex botnet evasion trojan
- Dridex
  Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
  botnet dridex
- Deletes itself
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

dridexbotnetevasiontrojan

behavioral2

dridexbotnetevasiontrojan