General

  • Target

    2e05708358905af391bb9d1da16443c0N

  • Size

    173KB

  • Sample

    240827-gz9vrsybrp

  • MD5

    2e05708358905af391bb9d1da16443c0

  • SHA1

    790515fdb92860f7b575ec5e8d434bfceb586e4b

  • SHA256

    9b3af3757bb15b5d83739b5fb2d45e3f36bc8b17f1c19e0367ede4cf381e6ac4

  • SHA512

    fd4e9a1a7d470875f7c9e577ff8a9236e052d995c032fd0dc0a610879f771735720c4476f7c2894c4ca5e2623c54ee72f7e120fb8d927a9917c8d56f8002d19d

  • SSDEEP

    3072:eaI6YY/DDdmhdj+O2WYXwU3qstRty89ksD0qOim1Gz4:eazYY/HO1kPdy8ksDD1mY

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

159.69.237.186:443

207.210.192.60:8172

51.77.82.110:9987

rc4.plain
rc4.plain

Targets

    • Target

      2e05708358905af391bb9d1da16443c0N

    • Size

      173KB

    • MD5

      2e05708358905af391bb9d1da16443c0

    • SHA1

      790515fdb92860f7b575ec5e8d434bfceb586e4b

    • SHA256

      9b3af3757bb15b5d83739b5fb2d45e3f36bc8b17f1c19e0367ede4cf381e6ac4

    • SHA512

      fd4e9a1a7d470875f7c9e577ff8a9236e052d995c032fd0dc0a610879f771735720c4476f7c2894c4ca5e2623c54ee72f7e120fb8d927a9917c8d56f8002d19d

    • SSDEEP

      3072:eaI6YY/DDdmhdj+O2WYXwU3qstRty89ksD0qOim1Gz4:eazYY/HO1kPdy8ksDD1mY

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks