Overview

overview

10

Static

static

1

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    21260151f07549ff5e1dc07ca6281d3fa876483f1dd014afde823fa0a0e0a1a2

  • Size

    280KB

  • Sample

    210928-n7n2lacabq

  • MD5

    d0a801b89e60cb6ccf654a9baa290783

  • SHA1

    03b0065ac6ae5667552501ba9d25c51b1bc3034d

  • SHA256

    21260151f07549ff5e1dc07ca6281d3fa876483f1dd014afde823fa0a0e0a1a2

  • SHA512

    daa434061ce27f202f511aa9f217d7aa945fcdab7e441c8ad8db6ac872289dae09d009950b09890065ee094db2da08950f4c9b7e59176255a570e9c4c3712575

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      21260151f07549ff5e1dc07ca6281d3fa876483f1dd014afde823fa0a0e0a1a2

    • Size

      280KB

    • MD5

      d0a801b89e60cb6ccf654a9baa290783

    • SHA1

      03b0065ac6ae5667552501ba9d25c51b1bc3034d

    • SHA256

      21260151f07549ff5e1dc07ca6281d3fa876483f1dd014afde823fa0a0e0a1a2

    • SHA512

      daa434061ce27f202f511aa9f217d7aa945fcdab7e441c8ad8db6ac872289dae09d009950b09890065ee094db2da08950f4c9b7e59176255a570e9c4c3712575

    Score
    10/10
    neshtapersistencespywarestealer

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks