Analysis
-
max time kernel
76s -
max time network
99s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
20-01-2025 20:41
General
-
Target
17e6720b3b9f96d4fb7e856208adc8f4b545608a7b09c8f23b0caef48fa091f6N.exe
-
Size
366KB
-
MD5
87eabc7694abacf221f6e4db1d8ce9e0
-
SHA1
97f6349acceb8febb29359578868cb34b5700f0f
-
SHA256
17e6720b3b9f96d4fb7e856208adc8f4b545608a7b09c8f23b0caef48fa091f6
-
SHA512
eb40b547becd91257728f7d88c44f6b5282561c22087e7070c331eee0f5e971dd5c55f016bf5b79d6d5930b0674844584c6412b01eeb8339557bbf48db5462c8
-
SSDEEP
6144:wuUfyIrWsUujF7DpzIhDyacsEv6P8xWWzv:tUaIrWPupJIheacsb0zv
Malware Config
Extracted
dridex
10111
87.98.218.33:443
54.38.143.246:691
92.38.128.47:3389
159.65.79.173:3886
Signatures
-
Dridex
Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
-
Dridex family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\17e6720b3b9f96d4fb7e856208adc8f4b545608a7b09c8f23b0caef48fa091f6N.exe"C:\Users\Admin\AppData\Local\Temp\17e6720b3b9f96d4fb7e856208adc8f4b545608a7b09c8f23b0caef48fa091f6N.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
156KB
-
Filesize
160KB
-
Filesize
376KB
-
Filesize
160KB