Analysis
-
max time kernel
140s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
17-04-2024 13:06
General
-
Target
4fccd38f504290cf5c70e7336071a90a064303c7fdf5c17f7c38001768bce115.exe
-
Size
241KB
-
MD5
e614a69d706913376ab2bb20a703dcf5
-
SHA1
3a83bb68be29e1f18fc9d328d952fd228abfae2a
-
SHA256
4fccd38f504290cf5c70e7336071a90a064303c7fdf5c17f7c38001768bce115
-
SHA512
dd22042b471b608b7a52d531d3b690d35cbe684333cd88c55709b6b562f81d3c02e866ad95fb4e6d62908005cd9e5ae01e88d3c86346ce0c2c156036b72b77ec
-
SSDEEP
3072:KWiPOo14wwI606CzpJEPlp+K2b1WvAUQdk5m84D2KQdXtvkDqW0TrHbed2rT2pN8:KWdEj6rapJEPr11AXdQm84Dr0OOPSR4
Score
10/10
Malware Config
Extracted
Family
dridex
C2
198.61.168.254:443
51.255.165.160:3389
209.126.105.6:884
Signatures
-
Dridex
Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
-
Dridex Loader 2 IoCs
Detects Dridex both x86 and x64 loader in memory.
Processes
-
C:\Users\Admin\AppData\Local\Temp\4fccd38f504290cf5c70e7336071a90a064303c7fdf5c17f7c38001768bce115.exe"C:\Users\Admin\AppData\Local\Temp\4fccd38f504290cf5c70e7336071a90a064303c7fdf5c17f7c38001768bce115.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
24KB
-
Filesize
240KB
-
Filesize
240KB