Overview

overview

10

Static

static

3

4c620a9384...15.dll

windows7-x64

10

4c620a9384...15.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4c620a9384a551d18ef1006fa2b89f15

  • Size

    1.6MB

  • Sample

    240108-y8kexaaafm

  • MD5

    4c620a9384a551d18ef1006fa2b89f15

  • SHA1

    5fdc4e376461609c1848ae651ddaa15e53d47b7d

  • SHA256

    18b45bd4552f4f6ada10aaef4f131e845f9e39e20312f3fe6f67f243ce241eb3

  • SHA512

    b1c93e1d0600a4fb519a9dffc4007f1be4e44076c54d0cd1d76637d26d288f56ae975d9819286e7ccdee4655b5ade039404502a84d2fdc2f64d92a56d3677898

  • SSDEEP

    12288:+VI0W/TtlPLfJCm3WIYxJ9yK5IQ9PElOlidGAWilgm5Qq0nB6wtt4AenZ1:jfP7fWsK5z9A+WGAW+V5SB6Ct4bnb

Score
10/10
dridexbotnetevasionpayloadtrojan

Malware Config

Targets

    • Target

      4c620a9384a551d18ef1006fa2b89f15

    • Size

      1.6MB

    • MD5

      4c620a9384a551d18ef1006fa2b89f15

    • SHA1

      5fdc4e376461609c1848ae651ddaa15e53d47b7d

    • SHA256

      18b45bd4552f4f6ada10aaef4f131e845f9e39e20312f3fe6f67f243ce241eb3

    • SHA512

      b1c93e1d0600a4fb519a9dffc4007f1be4e44076c54d0cd1d76637d26d288f56ae975d9819286e7ccdee4655b5ade039404502a84d2fdc2f64d92a56d3677898

    • SSDEEP

      12288:+VI0W/TtlPLfJCm3WIYxJ9yK5IQ9PElOlidGAWilgm5Qq0nB6wtt4AenZ1:jfP7fWsK5z9A+WGAW+V5SB6Ct4bnb

    Score
    10/10
    dridexbotnetevasionpayloadtrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Shellcode

      Detects Dridex Payload shellcode injected in Explorer process.

      botnetpayload

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks