General

  • Target

    5258d21fdd3d1c76b00f2956c8ac9690

  • Size

    1.9MB

  • Sample

    240111-dfkjzsebe9

  • MD5

    5258d21fdd3d1c76b00f2956c8ac9690

  • SHA1

    2cdfbb9a16cd0eb818fff344f85daaea59a5a10b

  • SHA256

    b21c536b39b5035840c086d58ac7d339344c4a02ba9f5e536010e6d0046acf46

  • SHA512

    2c7e813694f46b18c619e6b808b5545db35df1e1573693b3d76fc576f90269b03155f6189cfed4c49996b0ed58e6f37d9e2b789dfb3187b8383e012f921f98e1

  • SSDEEP

    12288:LVI0W/TtlPLfJCm3WIYxJ9yK5IQ9PElOlidGAWilgm5Qq0nB6wtt4AenZ1:KfP7fWsK5z9A+WGAW+V5SB6Ct4bnb

Malware Config

Targets

    • Target

      5258d21fdd3d1c76b00f2956c8ac9690

    • Size

      1.9MB

    • MD5

      5258d21fdd3d1c76b00f2956c8ac9690

    • SHA1

      2cdfbb9a16cd0eb818fff344f85daaea59a5a10b

    • SHA256

      b21c536b39b5035840c086d58ac7d339344c4a02ba9f5e536010e6d0046acf46

    • SHA512

      2c7e813694f46b18c619e6b808b5545db35df1e1573693b3d76fc576f90269b03155f6189cfed4c49996b0ed58e6f37d9e2b789dfb3187b8383e012f921f98e1

    • SSDEEP

      12288:LVI0W/TtlPLfJCm3WIYxJ9yK5IQ9PElOlidGAWilgm5Qq0nB6wtt4AenZ1:KfP7fWsK5z9A+WGAW+V5SB6Ct4bnb

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Shellcode

      Detects Dridex Payload shellcode injected in Explorer process.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks