General

  • Target

    5597457723eecd7a4e8dbbeb1d18c99e

  • Size

    1.1MB

  • Sample

    240112-fxr2hafbej

  • MD5

    5597457723eecd7a4e8dbbeb1d18c99e

  • SHA1

    de2d28a64166a6e444e553d1b4ba9bc4d86accdb

  • SHA256

    f9744c28a876adada38860a3d0ae92ea1b3915846ee6d9c5bdb8cad5affa2724

  • SHA512

    699b98cca37db9bbca50584147a3cfe48630381ee10626ad97c0040df7a8f09ef8e1de54fc94de340246e198cc802d72e8a45cb5e01eaad925024c66ecbe8d33

  • SSDEEP

    12288:TVI0W/TtlPLfJCm3WIYxJ9yK5IQ9PElOlidGAWilgm5Qq0nB6wtt4AenZ1:CfP7fWsK5z9A+WGAW+V5SB6Ct4bnb

Malware Config

Targets

    • Target

      5597457723eecd7a4e8dbbeb1d18c99e

    • Size

      1.1MB

    • MD5

      5597457723eecd7a4e8dbbeb1d18c99e

    • SHA1

      de2d28a64166a6e444e553d1b4ba9bc4d86accdb

    • SHA256

      f9744c28a876adada38860a3d0ae92ea1b3915846ee6d9c5bdb8cad5affa2724

    • SHA512

      699b98cca37db9bbca50584147a3cfe48630381ee10626ad97c0040df7a8f09ef8e1de54fc94de340246e198cc802d72e8a45cb5e01eaad925024c66ecbe8d33

    • SSDEEP

      12288:TVI0W/TtlPLfJCm3WIYxJ9yK5IQ9PElOlidGAWilgm5Qq0nB6wtt4AenZ1:CfP7fWsK5z9A+WGAW+V5SB6Ct4bnb

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Shellcode

      Detects Dridex Payload shellcode injected in Explorer process.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks