General
- Target 123a833c6ad4fefb0e612a93c8bfb2fda9525414b308f18c9d3ea56a5ea37fff.exe
- Size 984KB
- Sample250127-qab2wazrcq
- SHA256 123a833c6ad4fefb0e612a93c8bfb2fda9525414b308f18c9d3ea56a5ea37fff
Score
10/10
Malware Config
Targets
-
- Target 123a833c6ad4fefb0e612a93c8bfb2fda9525414b308f18c9d3ea56a5ea37fff.exe
- Size 984KB
- SHA256 123a833c6ad4fefb0e612a93c8bfb2fda9525414b308f18c9d3ea56a5ea37fff
Score10/10Dridex
Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
Dridex family
Dridex Shellcode
Detects Dridex Payload shellcode injected in Explorer process.
Executes dropped EXE
Loads dropped DLL
Adds Run key to start application
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Accessibility Features
1