2021-10-13 (WEDNESDAY) - MALSPAM-BASED DRIDEX ACTIVITY

NOTICE:

• The zip archives on this page have been updated, and they now use the new password scheme.  For the new password, see the "about" page of this website.

ASSOCIATED FILES:

• 2021-10-13-Dridex-IOCs.txt.zip   4.8 kB   (4,797 bytes)

• 2021-10-13-Dridex-IOCs.txt   (11,177 bytes)

• 2021-10-13-Dridex-malspam-20-examples.zip   1.3 MB   (1,294,408 bytes)

• 2021-10-13-Dridex-malspam-124628-UTC.eml   (117,373 bytes)
• 2021-10-13-Dridex-malspam-125658-UTC.eml   (117,242 bytes)
• 2021-10-13-Dridex-malspam-134418-UTC.eml   (117,327 bytes)
• 2021-10-13-Dridex-malspam-141058-UTC.eml   (117,193 bytes)
• 2021-10-13-Dridex-malspam-141839-UTC.eml   (117,205 bytes)
• 2021-10-13-Dridex-malspam-141913-UTC.eml   (117,299 bytes)
• 2021-10-13-Dridex-malspam-142604-UTC.eml   (117,273 bytes)
• 2021-10-13-Dridex-malspam-142609-UTC.eml   (117,379 bytes)
• 2021-10-13-Dridex-malspam-143609-UTC.eml   (117,090 bytes)
• 2021-10-13-Dridex-malspam-144309-UTC.eml   (117,333 bytes)
• 2021-10-13-Dridex-malspam-150014-UTC.eml   (116,909 bytes)
• 2021-10-13-Dridex-malspam-150113-UTC.eml   (117,122 bytes)
• 2021-10-13-Dridex-malspam-153558-UTC.eml   (117,016 bytes)
• 2021-10-13-Dridex-malspam-153633-UTC.eml   (117,266 bytes)
• 2021-10-13-Dridex-malspam-154214-UTC.eml   (117,264 bytes)
• 2021-10-13-Dridex-malspam-154709-UTC.eml   (117,347 bytes)
• 2021-10-13-Dridex-malspam-155248-UTC.eml   (117,061 bytes)
• 2021-10-13-Dridex-malspam-163858-UTC.eml   (117,375 bytes)
• 2021-10-13-Dridex-malspam-170159-UTC.eml   (117,205 bytes)
• 2021-10-13-Dridex-malspam-172113-UTC.eml   (117,329 bytes)

• 2021-10-13-Dridex-infection-traffic.pcap.zip   3.2 MB   (3,245,549 bytes)

• 2021-10-13-Dridex-infection-traffic.pcap   (3,437,059 bytes)

• 2021-10-13-Dridex-malware-and-artifacts.zip   3.1 MB   (3,104,559 bytes)

• 2021-10-13-Dridex-IOCs.txt   (11,177 bytes)
• cvnjihga   (634,cd r880 bytes)
• Payment_Receipt 6435.xls   (84,480 bytes)
• registry-update-and-malware/2021-10-13-registry-update-for-Dridex.txt   (704 bytes)
• registry-update-and-malware/CustomShellHost.exe   (855,040 bytes)
• registry-update-and-malware/WTSAPI32.dll   (667,648 bytes)
• scheduled-task-and-malware/2021-10-13-scheduled-task-for-Dridex.txt   (4,012 bytes)
• scheduled-task-and-malware/DUI70.dll   (950,272 bytes)
• scheduled-task-and-malware/SysResetErr.exe   (42,832 bytes)
• start-menu-link-and-malware/2021-10-13-startup-menu-link-for-Dridex.bin   (1,200 bytes)
• start-menu-link-and-malware/dwmapi.dll   (667,648 bytes)
• start-menu-link-and-malware/WMPDMC.exe   (1,568,256 bytes)

 

Click here to return to the main page.