Overview

overview

10

Static

static

3

cd32a737fc...eb.exe

windows7-x64

10

cd32a737fc...eb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6abc6f4b8fdc8b6ccef48c371446d9d7a57e03736ecfe03c5e56e82bc0bbc1bc

  • Size

    131KB

  • Sample

    240417-qwwy6sbd8w

  • MD5

    5ee425a68c67e43ba309248f59f8a54f

  • SHA1

    31c4bda4dad45e6b70fd47eae0a92b2c5b70ccd9

  • SHA256

    6abc6f4b8fdc8b6ccef48c371446d9d7a57e03736ecfe03c5e56e82bc0bbc1bc

  • SHA512

    8ab939332e3bf43c2c00871e5e2ab38c574f1f413c2fb8446b33c796242a7ffd16f544c7359be0462a9d101b583bcc9da8d63f8f7df87dd56299e44851f891e6

  • SSDEEP

    3072:r2h5ClpS7crSQBhGZzPfwCHHt+oisYgMT6/0bSIZgGFZQGhw66q:r2hwlE7clDGZbwCtVCTc0bSFGt6q

Score
10/10
dridexbotnetevasiontrojan

Malware Config

Extracted

Family

dridex

C2

185.206.146.88:443

5.44.45.177:443

185.16.41.224:443

Targets

    • Target

      cd32a737fcba8198d43fed5a68348f983f7713f79574a710deb7759e5a1301eb.exe

    • Size

      159KB

    • MD5

      72fe19810a9089cd1ec3ac5ddda22d3f

    • SHA1

      cecbd09b389a6f4e3ac7a81a9280e1893a6066ae

    • SHA256

      cd32a737fcba8198d43fed5a68348f983f7713f79574a710deb7759e5a1301eb

    • SHA512

      619fbdec0c6639ad0a15ac27a5de41fc302d671740f3b0f19be362a2110355c51f93898ed408b337f73623b1210ed0dd4585acfd6603b9ce767faeb84d1b40f6

    • SSDEEP

      3072:LjM4omazat8Sm0JjICd0BKTGAu+vEegNgbRvFcka8rKVO3gFtvlpb/:LjM4oFMYCyoqAuOEuV9cz8rKO4V

    Score
    10/10
    dridexbotnetevasiontrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Deletes itself

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks