Analysis
-
max time kernel
140s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
09/01/2024, 18:55
General
-
Target
eba4b6ce4bef0311efbf0f637ebb766a.exe
-
Size
1.1MB
-
MD5
eba4b6ce4bef0311efbf0f637ebb766a
-
SHA1
78f5539137289838a7dee817801a8eefcba253d1
-
SHA256
b70d31323c0ec53221c7aabb971207f4412d7ee21590a75b8f3894e217a12dae
-
SHA512
30774666ca33538732503dedd897328735439476678b859649dc8baf2011eb6b8c803e530b0ab2f1277502cb47e9566e543ab90a0b7b96c9bbaca82eb3675e66
-
SSDEEP
6144:nK6cyPiWCgknQ/HuyIzuTVzsMM56519p+6yT1+ga1td0HZOUlcR5fc:nM+ZdkmHubeaCo6Lga1QHZbO5
Score
10/10
Malware Config
Extracted
Family
dridex
Botnet
10111
C2
177.52.173.20:9043
192.100.170.1:10172
166.62.103.55:7443
rc4.plain
rc4.plain
Signatures
-
Dridex
Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled 1 TTPs 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\eba4b6ce4bef0311efbf0f637ebb766a.exe"C:\Users\Admin\AppData\Local\Temp\eba4b6ce4bef0311efbf0f637ebb766a.exe"1⤵
- Checks whether UAC is enabled
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
240KB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB