General

  • Target

    6714db2df8a6f6b5c50d59629ec34c6c

  • Size

    3.2MB

  • Sample

    240119-jprybaacf5

  • MD5

    6714db2df8a6f6b5c50d59629ec34c6c

  • SHA1

    a4b2879a300b905a63dce5114092208d4d1dec9a

  • SHA256

    d86ef2b5b3a29c907febf6d15d8f3fa781e1d5314549fed66df51d00db694818

  • SHA512

    7b6f0a5a4ea204821d3e513cb9a5c2926f06ab2ae2aea9d5baba857ec82867bf912edf75ab8e0250364ca81e015114d71b3e26dc9918ee734103fbc7456d1d56

  • SSDEEP

    12288:yVI0W/TtlPLfJCm3WIYxJ9yK5IQ9PElOlidGAWilgm5Qq0nB6wtt4AenZ1:vfP7fWsK5z9A+WGAW+V5SB6Ct4bnb

Malware Config

Targets

    • Target

      6714db2df8a6f6b5c50d59629ec34c6c

    • Size

      3.2MB

    • MD5

      6714db2df8a6f6b5c50d59629ec34c6c

    • SHA1

      a4b2879a300b905a63dce5114092208d4d1dec9a

    • SHA256

      d86ef2b5b3a29c907febf6d15d8f3fa781e1d5314549fed66df51d00db694818

    • SHA512

      7b6f0a5a4ea204821d3e513cb9a5c2926f06ab2ae2aea9d5baba857ec82867bf912edf75ab8e0250364ca81e015114d71b3e26dc9918ee734103fbc7456d1d56

    • SSDEEP

      12288:yVI0W/TtlPLfJCm3WIYxJ9yK5IQ9PElOlidGAWilgm5Qq0nB6wtt4AenZ1:vfP7fWsK5z9A+WGAW+V5SB6Ct4bnb

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Shellcode

      Detects Dridex Payload shellcode injected in Explorer process.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks