General

  • Target

    e7728ec352245e08c9e7fa0ea58a7c20N

  • Size

    173KB

  • Sample

    240827-d2jjta1apb

  • MD5

    e7728ec352245e08c9e7fa0ea58a7c20

  • SHA1

    91bbb19fef78bf206a3061c4e63dbe256a5f8123

  • SHA256

    557c475b5649a49910f6cdc22d4fd52f4fa8d21bd0ceb9edc3c7593d5ede128d

  • SHA512

    521628c61d3529c4aabe08340c4b3c91fe4fbf1971ee8998aa062696d98bf0a3556db649b36a9538fa3a0c99416ef70a333cdaffc39277368949a919d0df6f94

  • SSDEEP

    3072:CaI6YY/DDdmhdj+O2WYXwU3qstRty89ksDoqOim1Gz4:CazYY/HO1kPdy8ksDv1mY

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

159.69.237.186:443

207.210.192.60:8172

51.77.82.110:9987

rc4.plain
rc4.plain

Targets

    • Target

      e7728ec352245e08c9e7fa0ea58a7c20N

    • Size

      173KB

    • MD5

      e7728ec352245e08c9e7fa0ea58a7c20

    • SHA1

      91bbb19fef78bf206a3061c4e63dbe256a5f8123

    • SHA256

      557c475b5649a49910f6cdc22d4fd52f4fa8d21bd0ceb9edc3c7593d5ede128d

    • SHA512

      521628c61d3529c4aabe08340c4b3c91fe4fbf1971ee8998aa062696d98bf0a3556db649b36a9538fa3a0c99416ef70a333cdaffc39277368949a919d0df6f94

    • SSDEEP

      3072:CaI6YY/DDdmhdj+O2WYXwU3qstRty89ksDoqOim1Gz4:CazYY/HO1kPdy8ksDv1mY

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks