General

  • Target

    7d9fd149eb841ae34436323ec64e7fc04851c304dcdc16204ed509a8dd76b2de

  • Size

    1.4MB

  • Sample

    250218-jy7p5azpz2

  • MD5

    5b0a59aec45ffdead231dc88921157f3

  • SHA1

    c5eed119e39d49b838047256f988687ac8fdff99

  • SHA256

    7d9fd149eb841ae34436323ec64e7fc04851c304dcdc16204ed509a8dd76b2de

  • SHA512

    da361f2f6cccbf4eaa0d716a9fc571d3863e4f593c6e5bd134ee5dafa61a6e1aa231f4b8e7b545ab583186d6dda120ee20bd04e94f8acc238651a80c6f12f1c7

  • SSDEEP

    3072:GjwDm1gWq7Y+jbkGenScL1FsrKY/gnl4PNN0Bi3434YFOmOXoHOZNxXgXTP+wrGV:GjwDmrqel7oe4nmOXouZRcGo

Malware Config

Extracted

Family

dridex

Botnet

10111

C2

157.7.166.26:5353

162.144.127.197:3786

46.22.57.17:5037

rc4.plain
rc4.plain

Targets

    • Target

      7d9fd149eb841ae34436323ec64e7fc04851c304dcdc16204ed509a8dd76b2de

    • Size

      1.4MB

    • MD5

      5b0a59aec45ffdead231dc88921157f3

    • SHA1

      c5eed119e39d49b838047256f988687ac8fdff99

    • SHA256

      7d9fd149eb841ae34436323ec64e7fc04851c304dcdc16204ed509a8dd76b2de

    • SHA512

      da361f2f6cccbf4eaa0d716a9fc571d3863e4f593c6e5bd134ee5dafa61a6e1aa231f4b8e7b545ab583186d6dda120ee20bd04e94f8acc238651a80c6f12f1c7

    • SSDEEP

      3072:GjwDm1gWq7Y+jbkGenScL1FsrKY/gnl4PNN0Bi3434YFOmOXoHOZNxXgXTP+wrGV:GjwDmrqel7oe4nmOXouZRcGo

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks