General

  • Target
    567b6640615b51d0bec09cef9e63851c
  • Size 3.2MB
  • Sample240112-pt9ltafhhn
  • SHA256 12cf86267d6157fe1f366c0c3529e1e02aa87e533244d95a662fd1de6d80c52c
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      567b6640615b51d0bec09cef9e63851c
    • Size 3.2MB
    • SHA256 12cf86267d6157fe1f366c0c3529e1e02aa87e533244d95a662fd1de6d80c52c
    • MD5 SHA1 SHA512 SSDEEP
    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Shellcode

      Detects Dridex Payload shellcode injected in Explorer process.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks