Overview

overview

10

Static

static

68ef0bd9ea...b2.dll

windows7_x64

10

68ef0bd9ea...b2.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    68ef0bd9ea3010ec7948345cc9338dbb8ea093e24284b41ff9fc46aad317abb2

  • Size

    976KB

  • Sample

    220419-exrkasbfhq

  • MD5

    28545297f8559419c9554247053d4f87

  • SHA1

    19e30fbaee5c3032a1b3866f2880ee29a62588dd

  • SHA256

    68ef0bd9ea3010ec7948345cc9338dbb8ea093e24284b41ff9fc46aad317abb2

  • SHA512

    01c2e35bd16792e622949131728e9c7210e671ceddd0add4514bc7a952e34f18e6b4b4387bb1162ef5b6c69bc6bb2967288abb5eae131819e07b0247ca96c1f4

Score
10/10
dridexbotnetevasionpayloadpersistencetrojan

Malware Config

Targets

    • Target

      68ef0bd9ea3010ec7948345cc9338dbb8ea093e24284b41ff9fc46aad317abb2

    • Size

      976KB

    • MD5

      28545297f8559419c9554247053d4f87

    • SHA1

      19e30fbaee5c3032a1b3866f2880ee29a62588dd

    • SHA256

      68ef0bd9ea3010ec7948345cc9338dbb8ea093e24284b41ff9fc46aad317abb2

    • SHA512

      01c2e35bd16792e622949131728e9c7210e671ceddd0add4514bc7a952e34f18e6b4b4387bb1162ef5b6c69bc6bb2967288abb5eae131819e07b0247ca96c1f4

    Score
    10/10
    dridexbotnetevasionpayloadpersistencetrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Shellcode

      Detects Dridex Payload shellcode injected in Explorer process.

      botnetpayload

    • Modifies Installed Components in the registry

      persistence

    • Checks whether UAC is enabled

      evasiontrojan

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

4
T1082

Query Registry

3
T1012

Peripheral Device Discovery

2
T1120

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks