General
- Target 6e544a8ffb2445aa923eb1d2101b307e_JaffaCakes118
- Size 1.2MB
- Sample240730-cdtjfawfkh
- SHA256 055baa0bb1920eec3434dbec0463a942536461b5d587ab1db54eca82f54186ef
Score
10/10
Malware Config
Targets
-
- Target 6e544a8ffb2445aa923eb1d2101b307e_JaffaCakes118
- Size 1.2MB
- SHA256 055baa0bb1920eec3434dbec0463a942536461b5d587ab1db54eca82f54186ef
Score10/10Dridex
Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
Dridex Shellcode
Detects Dridex Payload shellcode injected in Explorer process.
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE
Loads dropped DLL
Adds Run key to start application
Checks whether UAC is enabled
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1