dridex

General

Target

JaffaCakes118_cd5ca01629c3df8e0ced5b0573f65fbc662784e7bf33a36f25a7edf48fae6246
Size

159KB
Sample

241230-22jftasqgr
MD5

e0ffa20412fc75802e9205226ece03f3
SHA1

e29d182fd23fe81a15093dbe35e93823483bf1a8
SHA256

cd5ca01629c3df8e0ced5b0573f65fbc662784e7bf33a36f25a7edf48fae6246
SHA512

0b04933c1a31eba7d997a50d4c44ca82f0e3660fa48c72bf632722200fb0087b77a5cadc9322121166dcc50ef4283a4cc49353f0d8b13b5211b59f7ccb2624c6
SSDEEP

3072:i78CMtKJlXoDFwXrdV/9/uWIdojDZl4epTGmoAc7iTRilfn6wlYYOZwd:RnClX8WZ7/HrRCADTR0VlIZw

Score

10^/10

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain

Targets

- Target
  
  JaffaCakes118_cd5ca01629c3df8e0ced5b0573f65fbc662784e7bf33a36f25a7edf48fae6246
- Size
  
  159KB
- MD5
  
  e0ffa20412fc75802e9205226ece03f3
- SHA1
  
  e29d182fd23fe81a15093dbe35e93823483bf1a8
- SHA256
  
  cd5ca01629c3df8e0ced5b0573f65fbc662784e7bf33a36f25a7edf48fae6246
- SHA512
  
  0b04933c1a31eba7d997a50d4c44ca82f0e3660fa48c72bf632722200fb0087b77a5cadc9322121166dcc50ef4283a4cc49353f0d8b13b5211b59f7ccb2624c6
- SSDEEP
  
  3072:i78CMtKJlXoDFwXrdV/9/uWIdojDZl4epTGmoAc7iTRilfn6wlYYOZwd:RnClX8WZ7/HrRCADTR0VlIZw
Score

10^/10

dridex 22203 botnet discovery evasion loader trojan
- Dridex
  Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
  botnet dridex
- Dridex family
  dridex
- Dridex Loader
  Detects Dridex both x86 and x64 loader in memory.
  botnet loader
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Dridex family

Dridex Loader

Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2