Resubmissions

06/08/2020, 16:20

200806-ebehg4hgms

14/07/2020, 11:19

200714-s43spmm1nn

14/07/2020, 05:12

200714-xzklav3tax

General

  • Target
    VERSION.dll
  • Size 972KB
  • Sample200806-ebehg4hgms
  • SHA256 4ed7566f8b70e42f52615a3c06512b10c6b3feef33627a82cdef1f054aa4cc75
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      VERSION.dll
    • Size 972KB
    • SHA256 4ed7566f8b70e42f52615a3c06512b10c6b3feef33627a82cdef1f054aa4cc75
    • MD5 SHA1 SHA512
    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Dridex Loader 'dmod' strings

      Detects 'dmod' strings in Dridex loader.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks