General

  • Target

    1c3020b882d26c1a009d1a5fa1048d39

  • Size

    2.1MB

  • Sample

    231230-zmj3pahhg7

  • MD5

    1c3020b882d26c1a009d1a5fa1048d39

  • SHA1

    34814b4676cc568357f104ce0aadeb0c0dabc900

  • SHA256

    ddc17a3234f8b037cef7a2121b611cfd17b9d8d23b86671b8031f03001b3dd4c

  • SHA512

    f35805c9e802daf0081b4236183effdddb59f3a7beeaca1bccfd577e84e9a9fa63f80dd47fdcd6d093c42ce9bd91c6731490c50ffce9241d996fb1e71c83f694

  • SSDEEP

    12288:sVI0W/TtlPLfJCm3WIYxJ9yK5IQ9PElOlidGAWilgm5Qq0nB6wtt4AenZ1MP/:ZfP7fWsK5z9A+WGAW+V5SB6Ct4bnb

Malware Config

Targets

    • Target

      1c3020b882d26c1a009d1a5fa1048d39

    • Size

      2.1MB

    • MD5

      1c3020b882d26c1a009d1a5fa1048d39

    • SHA1

      34814b4676cc568357f104ce0aadeb0c0dabc900

    • SHA256

      ddc17a3234f8b037cef7a2121b611cfd17b9d8d23b86671b8031f03001b3dd4c

    • SHA512

      f35805c9e802daf0081b4236183effdddb59f3a7beeaca1bccfd577e84e9a9fa63f80dd47fdcd6d093c42ce9bd91c6731490c50ffce9241d996fb1e71c83f694

    • SSDEEP

      12288:sVI0W/TtlPLfJCm3WIYxJ9yK5IQ9PElOlidGAWilgm5Qq0nB6wtt4AenZ1MP/:ZfP7fWsK5z9A+WGAW+V5SB6Ct4bnb

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Shellcode

      Detects Dridex Payload shellcode injected in Explorer process.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks