General

  • Target

    793df85f287f06c4764a229b404e0a7f

  • Size

    660KB

  • Sample

    240127-eskaeschg2

  • MD5

    793df85f287f06c4764a229b404e0a7f

  • SHA1

    454ad7fe4ede68aeffa2144dc95d22618a17a17e

  • SHA256

    823691284d6b7786dee73b7315b3cd146eac4160d5f7fca663cab821b66698fa

  • SHA512

    e20fce0797127f695247109fa01d39db3304fee14aa34441cc5f88c3ea38c18bf8d013b2207c57dd56b542dc9eaee0100a3c3c58c326be54677e760dd7f50c9f

  • SSDEEP

    6144:Z34xznfAp4x+NWMqW/KZ1vCDTEpc2bysCZR6iwAtUnWKT5WK8Rpv1llfFfCRAuTF:ZIKp/UWCZdCDh2IZDwAFRpR6Au

Malware Config

Targets

    • Target

      793df85f287f06c4764a229b404e0a7f

    • Size

      660KB

    • MD5

      793df85f287f06c4764a229b404e0a7f

    • SHA1

      454ad7fe4ede68aeffa2144dc95d22618a17a17e

    • SHA256

      823691284d6b7786dee73b7315b3cd146eac4160d5f7fca663cab821b66698fa

    • SHA512

      e20fce0797127f695247109fa01d39db3304fee14aa34441cc5f88c3ea38c18bf8d013b2207c57dd56b542dc9eaee0100a3c3c58c326be54677e760dd7f50c9f

    • SSDEEP

      6144:Z34xznfAp4x+NWMqW/KZ1vCDTEpc2bysCZR6iwAtUnWKT5WK8Rpv1llfFfCRAuTF:ZIKp/UWCZdCDh2IZDwAFRpR6Au

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Shellcode

      Detects Dridex Payload shellcode injected in Explorer process.

    • Dridex payload

      Detects Dridex x64 core DLL in memory.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks