General

  • Target
    61f2627485987b4054ff97050f0dfe2b
  • Size 964KB
  • Sample240117-g3a6lsaack
  • SHA256 771e168408b17e5f7ae16bd3a878820d0e0a844f25d549507b6d2b9c8ed0c9e2
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      61f2627485987b4054ff97050f0dfe2b
    • Size 964KB
    • SHA256 771e168408b17e5f7ae16bd3a878820d0e0a844f25d549507b6d2b9c8ed0c9e2
    • MD5 SHA1 SHA512 SSDEEP
    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Shellcode

      Detects Dridex Payload shellcode injected in Explorer process.

    • Dridex payload

      Detects Dridex x64 core DLL in memory.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks