General

  • Target

    906a896e8f59cc7d143658def7c21103

  • Size

    1.5MB

  • Sample

    240204-29m4zafbal

  • MD5

    906a896e8f59cc7d143658def7c21103

  • SHA1

    45bd17601b507cbb7ad05cfbc4c36494aad7f371

  • SHA256

    8bdf8792f1d12400ff0dca67bbdfe80a06234e09edf599aa5d0ed67d2c272d95

  • SHA512

    4c8fb20828901527659502be31f2cc60728dc1ee7b09846e810b8b42f7dbecc002416ecd4c947775b25570231d37cfb966136c2c15e824fdec4e98f6d3c22d2d

  • SSDEEP

    12288:7VI0W/TtlPLfJCm3WIYxJ9yK5IQ9PElOlidGAWilgm5Qq0nB6wtt4AenZ1:afP7fWsK5z9A+WGAW+V5SB6Ct4bnb

Malware Config

Targets

    • Target

      906a896e8f59cc7d143658def7c21103

    • Size

      1.5MB

    • MD5

      906a896e8f59cc7d143658def7c21103

    • SHA1

      45bd17601b507cbb7ad05cfbc4c36494aad7f371

    • SHA256

      8bdf8792f1d12400ff0dca67bbdfe80a06234e09edf599aa5d0ed67d2c272d95

    • SHA512

      4c8fb20828901527659502be31f2cc60728dc1ee7b09846e810b8b42f7dbecc002416ecd4c947775b25570231d37cfb966136c2c15e824fdec4e98f6d3c22d2d

    • SSDEEP

      12288:7VI0W/TtlPLfJCm3WIYxJ9yK5IQ9PElOlidGAWilgm5Qq0nB6wtt4AenZ1:afP7fWsK5z9A+WGAW+V5SB6Ct4bnb

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Shellcode

      Detects Dridex Payload shellcode injected in Explorer process.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks