dridex

General

Target

JaffaCakes118_521d599cd2ac7c8094cb93518da06630ff284f23cfd7337f16a8a61e980594b0
Size

158KB
Sample

241230-xcqrdawlbv
MD5

d1e360be28d8af59b2fa7dd9c9b28aab
SHA1

a2adbc3eeb978d849e184eaa79f4b4355692ac7f
SHA256

521d599cd2ac7c8094cb93518da06630ff284f23cfd7337f16a8a61e980594b0
SHA512

419a7ddff70b734756526d623f74b4b70959a0e46310a1715f6eb0e9d0949acabbcbfebc639cc714e6bcf1df3f7faf5219efc216a012556e29e623a4e7fb0377
SSDEEP

3072:AA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:A3J256FBMO93IuAiywi4Y2Z

Score

10^/10

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

8.210.53.215:443

72.249.22.245:2303

188.40.137.206:8172

rc4.plain

Targets

- Target
  
  JaffaCakes118_521d599cd2ac7c8094cb93518da06630ff284f23cfd7337f16a8a61e980594b0
- Size
  
  158KB
- MD5
  
  d1e360be28d8af59b2fa7dd9c9b28aab
- SHA1
  
  a2adbc3eeb978d849e184eaa79f4b4355692ac7f
- SHA256
  
  521d599cd2ac7c8094cb93518da06630ff284f23cfd7337f16a8a61e980594b0
- SHA512
  
  419a7ddff70b734756526d623f74b4b70959a0e46310a1715f6eb0e9d0949acabbcbfebc639cc714e6bcf1df3f7faf5219efc216a012556e29e623a4e7fb0377
- SSDEEP
  
  3072:AA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:A3J256FBMO93IuAiywi4Y2Z
Score

10^/10

dridex 40112 botnet discovery evasion loader trojan
- Dridex
  Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
  botnet dridex
- Dridex family
  dridex
- Dridex Loader
  Detects Dridex both x86 and x64 loader in memory.
  botnet loader
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Dridex family

Dridex Loader

Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2