Overview

overview

10

Static

static

3

9ab41214f6...97.dll

windows7-x64

10

9ab41214f6...97.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9ab41214f6da199b862e32c80e37be8276ba4c54452ad4ce541b3663168f8997

  • Size

    1.1MB

  • Sample

    241012-m9pv8ssapj

  • MD5

    cf827ba49ebc6808cdc2946c97e697ae

  • SHA1

    79f5163acc6e05138b311d3cc74d4c3cd3dc3d73

  • SHA256

    9ab41214f6da199b862e32c80e37be8276ba4c54452ad4ce541b3663168f8997

  • SHA512

    d3f7bff530fd6e18144eb544f7ce46e61a178bebe4d0625989f8a50c51ee076f0b41a07d6c5c9da0acf120027173fa18a30571dbe78ad45036410e357ac91af2

  • SSDEEP

    12288:akMZ+g4TyilMqFvPIV93i/S0hzmOBt5nihfSxI/mhjEvqJ0D/eAQsroXAkH64C:akMZ+gf4ltGd8H1fYO0q2G1Ah

Score
10/10
dridexbotnetevasionpayloadpersistencetrojan

Malware Config

Targets

    • Target

      9ab41214f6da199b862e32c80e37be8276ba4c54452ad4ce541b3663168f8997

    • Size

      1.1MB

    • MD5

      cf827ba49ebc6808cdc2946c97e697ae

    • SHA1

      79f5163acc6e05138b311d3cc74d4c3cd3dc3d73

    • SHA256

      9ab41214f6da199b862e32c80e37be8276ba4c54452ad4ce541b3663168f8997

    • SHA512

      d3f7bff530fd6e18144eb544f7ce46e61a178bebe4d0625989f8a50c51ee076f0b41a07d6c5c9da0acf120027173fa18a30571dbe78ad45036410e357ac91af2

    • SSDEEP

      12288:akMZ+g4TyilMqFvPIV93i/S0hzmOBt5nihfSxI/mhjEvqJ0D/eAQsroXAkH64C:akMZ+gf4ltGd8H1fYO0q2G1Ah

    Score
    10/10
    dridexbotnetevasionpayloadpersistencetrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Shellcode

      Detects Dridex Payload shellcode injected in Explorer process.

      botnetpayload

    • Dridex payload

      Detects Dridex x64 core DLL in memory.

      botnetpayload

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks