dridex

General

Target

JaffaCakes118_d5398e86c06256e8e67923cb9f6c916fb465f24cd1ce35964b5c80414b513a17
Size

204KB
Sample

241230-fycm7syqfw
MD5

300f167ba2c1483eae28fb2e24aa2c5d
SHA1

6cd596bbef7014480aa99cd3a22eb7ad3a2584d3
SHA256

d5398e86c06256e8e67923cb9f6c916fb465f24cd1ce35964b5c80414b513a17
SHA512

ed9b33a6902f18ddbb200ac71b579a4d2bd37161e9cd979b7816a0b7b48bcefe05b5d88c6d630104198da96a4bafeba0e4b270b6133ac60631636df39c1b8e54
SSDEEP

3072:+BHfDmTQoHJhc+1aImpJRxSmR7bVsSazalcBfc7Ivu5IMlZ:+BHLSc+wLJRHFVsSaGluUs25Iw

Score

10^/10

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

45.58.56.12:443

162.241.54.59:6601

51.91.76.89:2303

rc4.plain

Targets

- Target
  
  JaffaCakes118_d5398e86c06256e8e67923cb9f6c916fb465f24cd1ce35964b5c80414b513a17
- Size
  
  204KB
- MD5
  
  300f167ba2c1483eae28fb2e24aa2c5d
- SHA1
  
  6cd596bbef7014480aa99cd3a22eb7ad3a2584d3
- SHA256
  
  d5398e86c06256e8e67923cb9f6c916fb465f24cd1ce35964b5c80414b513a17
- SHA512
  
  ed9b33a6902f18ddbb200ac71b579a4d2bd37161e9cd979b7816a0b7b48bcefe05b5d88c6d630104198da96a4bafeba0e4b270b6133ac60631636df39c1b8e54
- SSDEEP
  
  3072:+BHfDmTQoHJhc+1aImpJRxSmR7bVsSazalcBfc7Ivu5IMlZ:+BHLSc+wLJRHFVsSaGluUs25Iw
Score

10^/10

dridex 40112 botnet discovery evasion loader trojan
- Dridex
  Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
  botnet dridex
- Dridex family
  dridex
- Dridex Loader
  Detects Dridex both x86 and x64 loader in memory.
  botnet loader
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Dridex family

Dridex Loader

Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2