Overview

overview

10

Static

static

2f7f63c6ba...14.dll

windows7_x64

10

2f7f63c6ba...14.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2f7f63c6ba9e9a2cb5621c4be44f44df3d911aac1b57f240f60da951c69b4714

  • Size

    812KB

  • Sample

    210930-njvjgahefn

  • MD5

    6be35a004b38f1d462da7b67095416f3

  • SHA1

    38ddcc25df9db0bb5fbd8b84587af98ebde0ab64

  • SHA256

    2f7f63c6ba9e9a2cb5621c4be44f44df3d911aac1b57f240f60da951c69b4714

  • SHA512

    52b9c890d58086e22004dccae0e6ea95ef851e9dd6c342689cfe5ddb130be483dc44f3ef6a8af990c67443e37a92be8026268b7f1d2f142119c34a797c0f4679

Score
10/10
dridexbotnetevasionpayloadpersistencetrojan

Malware Config

Targets

    • Target

      2f7f63c6ba9e9a2cb5621c4be44f44df3d911aac1b57f240f60da951c69b4714

    • Size

      812KB

    • MD5

      6be35a004b38f1d462da7b67095416f3

    • SHA1

      38ddcc25df9db0bb5fbd8b84587af98ebde0ab64

    • SHA256

      2f7f63c6ba9e9a2cb5621c4be44f44df3d911aac1b57f240f60da951c69b4714

    • SHA512

      52b9c890d58086e22004dccae0e6ea95ef851e9dd6c342689cfe5ddb130be483dc44f3ef6a8af990c67443e37a92be8026268b7f1d2f142119c34a797c0f4679

    Score
    10/10
    dridexbotnetevasionpayloadpersistencetrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Payload

      Detects Dridex x64 core DLL in memory.

      botnetpayload

    • Dridex Shellcode

      Detects Dridex Payload shellcode injected in Explorer process.

      botnetpayload

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks