General

  • Target

    aed4584863417e6f5b5769e1cfd366ec90e9e8df9e87e3c977212a12a7410530

  • Size

    796KB

  • Sample

    240326-1w8cbage3s

  • MD5

    ecf496cfed962afd923d73576633a810

  • SHA1

    62f53ef7db3f013f56271d65fb5177f29f215941

  • SHA256

    aed4584863417e6f5b5769e1cfd366ec90e9e8df9e87e3c977212a12a7410530

  • SHA512

    65cc989d2f47644d83de43c212ec20a5b68be5d34f679989bd801b893c7f69ff42ca148a93a14eae4023e8d30719b15f331f0b2aaad6584e47f674677b9637bf

  • SSDEEP

    12288:MBim9Tnts08FbKuPcA8NAc1l/XkGaZKoRQIpRX2/0Ak2ng/Zi66wNdufAdNo:o/nts0Q9K/0ooRQIxAk2wi0N/A

Malware Config

Targets

    • Target

      aed4584863417e6f5b5769e1cfd366ec90e9e8df9e87e3c977212a12a7410530

    • Size

      796KB

    • MD5

      ecf496cfed962afd923d73576633a810

    • SHA1

      62f53ef7db3f013f56271d65fb5177f29f215941

    • SHA256

      aed4584863417e6f5b5769e1cfd366ec90e9e8df9e87e3c977212a12a7410530

    • SHA512

      65cc989d2f47644d83de43c212ec20a5b68be5d34f679989bd801b893c7f69ff42ca148a93a14eae4023e8d30719b15f331f0b2aaad6584e47f674677b9637bf

    • SSDEEP

      12288:MBim9Tnts08FbKuPcA8NAc1l/XkGaZKoRQIpRX2/0Ak2ng/Zi66wNdufAdNo:o/nts0Q9K/0ooRQIxAk2wi0N/A

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Shellcode

      Detects Dridex Payload shellcode injected in Explorer process.

    • Dridex payload

      Detects Dridex x64 core DLL in memory.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks