0c35f5b724faaa4d0f4f17f62272610047408b381df876067c98fca735a3682d

Analysis

max time kernel
1741s
max time network
1546s
platform
windows11-21h2_x64
resource
win11-20231129-en
resource tags

arch:x64arch:x86image:win11-20231129-enlocale:en-usos:windows11-21h2-x64system
submitted
04-12-2023 17:56

Target

The-MALWARE-Repo-master/Banking-Malware/Dridex/Trojan.Dridex.A.exe
Size

132KB
MD5

dbf96ab40b728c12951d317642fbd9da
SHA1

38687e06f4f66a6a661b94aaf4e73d0012dfb8e3
SHA256

daab430bb5771eaa7af0fbd3417604e8af5f4693099a6393a4dc3b440863bced
SHA512

a49cc96651d01da5d6cbb833df36b7987eafb4f09cc9c516c10d0d812002d06ae8edee4e7256c84e300dc2eadad90f7bb37c797bccdee4bad16fcaf88277b381
SSDEEP

3072:uItv1YJOQnVc2pEANuoUeyCx9CC5O86BJaoqsf:xrr2pEANuXCx9Jd6c

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 4296 wrote to memory of 3436	4296	Trojan.Dridex.A.exe	82
PID 4296 wrote to memory of 3436	4296	Trojan.Dridex.A.exe	82
PID 4296 wrote to memory of 3436	4296	Trojan.Dridex.A.exe	82
PID 4296 wrote to memory of 3436	4296	Trojan.Dridex.A.exe	82

C:\Users\Admin\AppData\Local\Temp\The-MALWARE-Repo-master\Banking-Malware\Dridex\Trojan.Dridex.A.exe
"C:\Users\Admin\AppData\Local\Temp\The-MALWARE-Repo-master\Banking-Malware\Dridex\Trojan.Dridex.A.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4296
- C:\Windows\SysWOW64\svchost.exe
  C:\Windows\system32\svchost.exe "C:\Users\Admin\AppData\Local\Temp\The-MALWARE-Repo-master\Banking-Malware\Dridex\Trojan.Dridex.A.exe"
  2⤵
  PID:3436

memory/3436-2-0x0000000002C40000-0x0000000002C41000-memory.dmp

Filesize
4KB

Download
memory/3436-5-0x0000000075D90000-0x0000000075E80000-memory.dmp

Filesize
960KB

Download
memory/3436-6-0x0000000075D90000-0x0000000075E80000-memory.dmp

Filesize
960KB

Download
memory/4296-0-0x0000000000B30000-0x0000000000B52000-memory.dmp

Filesize
136KB

Download
memory/4296-1-0x0000000000D30000-0x0000000000D36000-memory.dmp

Filesize
24KB

Download
memory/4296-4-0x0000000000B30000-0x0000000000B52000-memory.dmp

Filesize
136KB

Download