Analysis
-
max time kernel
110s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
16-01-2025 07:17
General
-
Target
c3145f16d37201bdfee03157468b384c9c6d606a0fde36b620d6ce614fe76281N.exe
-
Size
365KB
-
MD5
f2fdbfa4d88aa244122c85bea4df0600
-
SHA1
5dded234f1dc103248a39cb16461ad60ce3dfae9
-
SHA256
c3145f16d37201bdfee03157468b384c9c6d606a0fde36b620d6ce614fe76281
-
SHA512
c1f89d2358da24667ac1450837a9f78c2b50455cddb48dd388e80bdddc48972df3ed28fb7d80d02c361863a923ddd8bd741f650240728af53ca9975ecc95548f
-
SSDEEP
3072:BdOb5g2mc06HSamn/2AWbwvpS1IVrVOZHBvskLyAITytApFUKjbobZY:yFRmc06yamHgIchvlWAI5pFVH8Z
Malware Config
Extracted
dridex
94.130.66.61:691
192.232.207.243:8443
185.10.202.137:1443
88.217.172.79:3386
Signatures
-
Dridex
Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
-
Dridex family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\c3145f16d37201bdfee03157468b384c9c6d606a0fde36b620d6ce614fe76281N.exe"C:\Users\Admin\AppData\Local\Temp\c3145f16d37201bdfee03157468b384c9c6d606a0fde36b620d6ce614fe76281N.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
152KB
-
Filesize
116KB
-
Filesize
152KB
-
Filesize
116KB