Analysis
-
max time kernel
86s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
20-01-2025 09:46
General
-
Target
32df734f1b509ef75e7815eed132643506a75ae69608b194ea99c435e0f3c1b3.exe
-
Size
366KB
-
MD5
784c53923ecb92ffa0e0bffae6e5373d
-
SHA1
b1ec5ed63a82efbd1249d4c6b77cfe2ce0b2ae8d
-
SHA256
32df734f1b509ef75e7815eed132643506a75ae69608b194ea99c435e0f3c1b3
-
SHA512
5661cea019dbc7b9ea003f14d0d361e6d2dd85889324f8fcbc897bb569a37f1a36dbc3a57d14237e646e9b16342636ed7a77c8fb7ab154c1cd278bc6dd234af3
-
SSDEEP
6144:DuUfyIrWsUujF7DpzIhDyacsEv6P8xWWzH:aUaIrWPupJIheacsb0zH
Malware Config
Extracted
dridex
10111
87.98.218.33:443
54.38.143.246:691
92.38.128.47:3389
159.65.79.173:3886
Signatures
-
Dridex
Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
-
Dridex family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\32df734f1b509ef75e7815eed132643506a75ae69608b194ea99c435e0f3c1b3.exe"C:\Users\Admin\AppData\Local\Temp\32df734f1b509ef75e7815eed132643506a75ae69608b194ea99c435e0f3c1b3.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
156KB
-
Filesize
160KB
-
Filesize
376KB
-
Filesize
160KB