Overview

overview

10

Static

static

0578ca2624...1f.dll

windows7_x64

10

0578ca2624...1f.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0578ca26240da4f6d730aa7e4fe4f6f26c3a8abc83fb23383dfbd989c9d1e81f

  • Size

    1MB

  • Sample

    220419-eycsjabgfm

  • MD5

    7a4b0440d9c0b2710c81eeb5ac97b351

  • SHA1

    444cc6864cc9f95d37d89b141604c2edda758ca9

  • SHA256

    0578ca26240da4f6d730aa7e4fe4f6f26c3a8abc83fb23383dfbd989c9d1e81f

  • SHA512

    fd1b4d977b3316543279b53ea705c1b04d625058c8a3961b59fe980a0008d2bdeadaa014a45bb915eda4eeab96bd9821acf4e4bd2a1a0b52398dc37407696dc0

Score
10/10
dridexbotnetevasionpayloadpersistencetrojan

Malware Config

Targets

    • Target

      0578ca26240da4f6d730aa7e4fe4f6f26c3a8abc83fb23383dfbd989c9d1e81f

    • Size

      1MB

    • MD5

      7a4b0440d9c0b2710c81eeb5ac97b351

    • SHA1

      444cc6864cc9f95d37d89b141604c2edda758ca9

    • SHA256

      0578ca26240da4f6d730aa7e4fe4f6f26c3a8abc83fb23383dfbd989c9d1e81f

    • SHA512

      fd1b4d977b3316543279b53ea705c1b04d625058c8a3961b59fe980a0008d2bdeadaa014a45bb915eda4eeab96bd9821acf4e4bd2a1a0b52398dc37407696dc0

    Score
    10/10
    dridexbotnetevasionpayloadpersistencetrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Shellcode

      Detects Dridex Payload shellcode injected in Explorer process.

      botnetpayload

    • Modifies Installed Components in the registry

      persistence

    • Checks whether UAC is enabled

      evasiontrojan

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

4
T1082

Query Registry

3
T1012

Peripheral Device Discovery

2
T1120

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks