Overview

overview

10

Static

static

Sandra

windows10_x64

10

Resubmissions

28/05/2021, 05:59

210528-mj2qwc9z3x10

19/05/2021, 14:41

210519-khtrssqv6a10

10/05/2021, 18:06

210510-ncy7w9kqte10

Sharing

Copy URL Twitter E-mail

General

  • Target
    93394d6e_by_Libranalysis
  • Size 588KB
  • Sample210519-khtrssqv6a
  • SHA256 7f0f199833687549249b22ec50bbcb234d2ad2b8da993a6cbc86db8a53236530
  • MD5 SHA1 SHA512
Score
10/10
dridexbotnetevasionloaderpersistencetrojan

Malware Config

Targets

    • Target
      93394d6e_by_Libranalysis
    • Size 588KB
    • SHA256 7f0f199833687549249b22ec50bbcb234d2ad2b8da993a6cbc86db8a53236530
    • MD5 SHA1 SHA512
    Score
    10/10
    dridexbotnetevasionloaderpersistencetrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks