General

  • Target

    0f2a6647e91d05a44aad4c4062a4d73c

  • Size

    1.8MB

  • Sample

    231230-fje5sabdf6

  • MD5

    0f2a6647e91d05a44aad4c4062a4d73c

  • SHA1

    597fee0cbba7519f1f0c34a9aa9b22d6f91215d2

  • SHA256

    9ffd0ac05d13744074cb2f6b94d51655e5d5a08e0043f27c7400fdd5fe887cce

  • SHA512

    fdc20bc5aab87c844c9c91a6b42905c63e203940ddd7c02840621b764d5db41ccdd9b6ab8fce69749b79f67bbf4927e4c66985883fcb5706db5e34fd721cc25e

  • SSDEEP

    12288:aVI0W/TtlPLfJCm3WIYxJ9yK5IQ9PElOlidGAWilgm5Qq0nB6wtt4AenZ1:HfP7fWsK5z9A+WGAW+V5SB6Ct4bnb

Malware Config

Targets

    • Target

      0f2a6647e91d05a44aad4c4062a4d73c

    • Size

      1.8MB

    • MD5

      0f2a6647e91d05a44aad4c4062a4d73c

    • SHA1

      597fee0cbba7519f1f0c34a9aa9b22d6f91215d2

    • SHA256

      9ffd0ac05d13744074cb2f6b94d51655e5d5a08e0043f27c7400fdd5fe887cce

    • SHA512

      fdc20bc5aab87c844c9c91a6b42905c63e203940ddd7c02840621b764d5db41ccdd9b6ab8fce69749b79f67bbf4927e4c66985883fcb5706db5e34fd721cc25e

    • SSDEEP

      12288:aVI0W/TtlPLfJCm3WIYxJ9yK5IQ9PElOlidGAWilgm5Qq0nB6wtt4AenZ1:HfP7fWsK5z9A+WGAW+V5SB6Ct4bnb

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Shellcode

      Detects Dridex Payload shellcode injected in Explorer process.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks