Overview

overview

10

Static

static

1

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    16f75019c7de5d79c259d4b1f1003938bd6449ce3c49b28d6320bb43dd6bd82a

  • Size

    275KB

  • Sample

    211031-laq4kscfck

  • MD5

    931568b982ac42dd2edc68ff203ec101

  • SHA1

    9955f4d4fd6e0000a908e99116d5d22c6371b255

  • SHA256

    16f75019c7de5d79c259d4b1f1003938bd6449ce3c49b28d6320bb43dd6bd82a

  • SHA512

    2f9fd405e6d6dbcc369108d325ee195bac392beea240ce12c16d05bec9295240d971f9d87427a2664aed559564ed415489c0e3f9493184bac8fef824c9243780

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      16f75019c7de5d79c259d4b1f1003938bd6449ce3c49b28d6320bb43dd6bd82a

    • Size

      275KB

    • MD5

      931568b982ac42dd2edc68ff203ec101

    • SHA1

      9955f4d4fd6e0000a908e99116d5d22c6371b255

    • SHA256

      16f75019c7de5d79c259d4b1f1003938bd6449ce3c49b28d6320bb43dd6bd82a

    • SHA512

      2f9fd405e6d6dbcc369108d325ee195bac392beea240ce12c16d05bec9295240d971f9d87427a2664aed559564ed415489c0e3f9493184bac8fef824c9243780

    Score
    10/10
    neshtapersistencespywarestealer

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks