General
-
Target
11f259b62f6c5fbdd20f264ae77ecd1769e827f3693ba042c05a0de3d5352c3f
-
Size
391KB
-
Sample
240830-3sxgratarg
-
MD5
e68fa80244ba2d9f80435541cef8310e
-
SHA1
36a79202d4c868f6e0dab88017b56b4ab5315563
-
SHA256
11f259b62f6c5fbdd20f264ae77ecd1769e827f3693ba042c05a0de3d5352c3f
-
SHA512
11c3a6270044f152e978603f081a5f9423f7247814e3c60e4bad6e87e3ddda2518208976078c8f923f0552c514f7f3893a8d28a0ed35fcde7db6c00c51857762
-
SSDEEP
6144:Y80SggDvvgBubdc3Yw4t6CcmkcsvsrhbMDzSEp3LkeH1DC5qjfvJ/s/xE2U1C4yl:lvjMuu3YdAqPQDNxd1DC5qjHJ/Ie2sQl
Malware Config
Extracted
dridex
10444
174.128.245.202:443
51.83.3.52:13786
69.64.50.41:6602
Targets
-
-
Target
d7ad96ddac391bb7a5739200921b1cb8ab4a4d30ae5ccc69a21e62c304dddb67
-
Size
608KB
-
MD5
168062813cfbfe0ab3b14dab14666668
-
SHA1
d61ece0013233fb3b28026e827e3234ffdd7d014
-
SHA256
d7ad96ddac391bb7a5739200921b1cb8ab4a4d30ae5ccc69a21e62c304dddb67
-
SHA512
6d19e5227e4efb6904b560cfc4240f9fc30ec34d2d49a9dede71cec1648e9d488d312a60744db281924a62001275b91f0188b352f88e8598620fe483c865e428
-
SSDEEP
12288:bZGQdqOGT0JqydLqQSeCqsVK8kPRGO35N9mVMzXc6J:bZ0wWjeCVVK8kP9N9ogT
Score10/10-
Dridex
Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-