General

  • Target

    0f9ecb7c0082c3e76a40c35bb867ebbc

  • Size

    3.3MB

  • Sample

    231230-fs2p5sbfan

  • MD5

    0f9ecb7c0082c3e76a40c35bb867ebbc

  • SHA1

    9c2c642ec86ed495d98c0217628235657da0a58c

  • SHA256

    9d551aa53c203474d393074f3d7bc6459dc53e3bfd862a08796306b871ab0fc6

  • SHA512

    52a96a77467758ccedef8f1b109b577ecc669e4c58699daea91d7863ba20901533622ced60fd961838abb18822881436124f03997ecebc154fec4cecbe99917e

  • SSDEEP

    12288:KVI0W/TtlPLfJCm3WIYxJ9yK5IQ9PElOlidGAWilgm5Qq0nB6wtt4AenZ1:XfP7fWsK5z9A+WGAW+V5SB6Ct4bnb

Malware Config

Targets

    • Target

      0f9ecb7c0082c3e76a40c35bb867ebbc

    • Size

      3.3MB

    • MD5

      0f9ecb7c0082c3e76a40c35bb867ebbc

    • SHA1

      9c2c642ec86ed495d98c0217628235657da0a58c

    • SHA256

      9d551aa53c203474d393074f3d7bc6459dc53e3bfd862a08796306b871ab0fc6

    • SHA512

      52a96a77467758ccedef8f1b109b577ecc669e4c58699daea91d7863ba20901533622ced60fd961838abb18822881436124f03997ecebc154fec4cecbe99917e

    • SSDEEP

      12288:KVI0W/TtlPLfJCm3WIYxJ9yK5IQ9PElOlidGAWilgm5Qq0nB6wtt4AenZ1:XfP7fWsK5z9A+WGAW+V5SB6Ct4bnb

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Shellcode

      Detects Dridex Payload shellcode injected in Explorer process.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks