General

  • Target

    a128d5dbf0a6958b34884452071fb939

  • Size

    2.2MB

  • Sample

    231222-qm56gsgedm

  • MD5

    a128d5dbf0a6958b34884452071fb939

  • SHA1

    ec73595f599c36a9042681f5a84288e45a3df4b7

  • SHA256

    8586c2e64a6911b2c8620b8634db918608e9022c4acdd957cb3dc1e2d930a74e

  • SHA512

    f1b34abcadd613148c15be8339d74e06c169381fd5276c9d96fc0fc03e5cdd6cf9c70f3cbd9e72af2791c9bd0d6f44a992458ef052be044b2ec4d6073c2667c1

  • SSDEEP

    12288:uVI0W/TtlPLfJCm3WIYxJ9yK5IQ9PElOlidGAWilgm5Qq0nB6wtt4AenZ1eqYd:zfP7fWsK5z9A+WGAW+V5SB6Ct4bnbe

Malware Config

Targets

    • Target

      a128d5dbf0a6958b34884452071fb939

    • Size

      2.2MB

    • MD5

      a128d5dbf0a6958b34884452071fb939

    • SHA1

      ec73595f599c36a9042681f5a84288e45a3df4b7

    • SHA256

      8586c2e64a6911b2c8620b8634db918608e9022c4acdd957cb3dc1e2d930a74e

    • SHA512

      f1b34abcadd613148c15be8339d74e06c169381fd5276c9d96fc0fc03e5cdd6cf9c70f3cbd9e72af2791c9bd0d6f44a992458ef052be044b2ec4d6073c2667c1

    • SSDEEP

      12288:uVI0W/TtlPLfJCm3WIYxJ9yK5IQ9PElOlidGAWilgm5Qq0nB6wtt4AenZ1eqYd:zfP7fWsK5z9A+WGAW+V5SB6Ct4bnbe

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Shellcode

      Detects Dridex Payload shellcode injected in Explorer process.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks