Overview

overview

10

Static

static

3

3bb3888ef9...fa.dll

windows7-x64

10

3bb3888ef9...fa.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3bb3888ef9a0a1f5a252f43431f3c25c4f4265c0834a114b1ae1a2faee5b5dfa

  • Size

    608KB

  • Sample

    250219-kbfhss1re1

  • MD5

    b97901b96456a2d1574acd475800a052

  • SHA1

    9c1898dec863ab35f8271b3dbbbc56fb0321bea4

  • SHA256

    3bb3888ef9a0a1f5a252f43431f3c25c4f4265c0834a114b1ae1a2faee5b5dfa

  • SHA512

    72c745badd19fbff29ed18bb416ebbb362ba89e24185e3e39bd2b0f18536c9f35f5518298883138bd84abd3ddbd51f19bb2a15b18625bb6c7d8960fe9f9f4f32

  • SSDEEP

    6144:ug12AzW5HsiScvtNybiR8g0ISTFCRVe9/JE+++sKS1JGWWsca65eu9K2zqc4CWAZ:u82AK5HOEksJ1YW7DwzqyQ

Score
10/10
dridexbotnetdefense_evasiondiscoveryloaderpersistencetrojan

Malware Config

Targets

    • Target

      3bb3888ef9a0a1f5a252f43431f3c25c4f4265c0834a114b1ae1a2faee5b5dfa

    • Size

      608KB

    • MD5

      b97901b96456a2d1574acd475800a052

    • SHA1

      9c1898dec863ab35f8271b3dbbbc56fb0321bea4

    • SHA256

      3bb3888ef9a0a1f5a252f43431f3c25c4f4265c0834a114b1ae1a2faee5b5dfa

    • SHA512

      72c745badd19fbff29ed18bb416ebbb362ba89e24185e3e39bd2b0f18536c9f35f5518298883138bd84abd3ddbd51f19bb2a15b18625bb6c7d8960fe9f9f4f32

    • SSDEEP

      6144:ug12AzW5HsiScvtNybiR8g0ISTFCRVe9/JE+++sKS1JGWWsca65eu9K2zqc4CWAZ:u82AK5HOEksJ1YW7DwzqyQ

    Score
    10/10
    dridexbotnetdefense_evasiondiscoveryloaderpersistencetrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex family

      dridex

    • Dridex Loader 'dmod' strings

      Detects 'dmod' strings in Dridex loader.

      botnetloader

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Checks whether UAC is enabled

      defense_evasiontrojan

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks