Overview

overview

10

Static

static

10

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d4a923a1936f1ac5072883d118067f8ccda80e702d1593e5b7cdcd2b18915358

  • Size

    444KB

  • Sample

    211103-l5tsysdee5

  • MD5

    a62aa723f5e39dbcd27d3e3437d93ea1

  • SHA1

    e93b8907067bb9453218411e06396d53f689ada4

  • SHA256

    d4a923a1936f1ac5072883d118067f8ccda80e702d1593e5b7cdcd2b18915358

  • SHA512

    627f34686a9d17de881e603d8c33f5b599d5a3cfc3ebec579dd0b723bcd9c4d2db0af75a21de8c16e8ade6ddf79cde2fd10983aabff73bb8c9fbdf1b0d6c7086

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      d4a923a1936f1ac5072883d118067f8ccda80e702d1593e5b7cdcd2b18915358

    • Size

      444KB

    • MD5

      a62aa723f5e39dbcd27d3e3437d93ea1

    • SHA1

      e93b8907067bb9453218411e06396d53f689ada4

    • SHA256

      d4a923a1936f1ac5072883d118067f8ccda80e702d1593e5b7cdcd2b18915358

    • SHA512

      627f34686a9d17de881e603d8c33f5b599d5a3cfc3ebec579dd0b723bcd9c4d2db0af75a21de8c16e8ade6ddf79cde2fd10983aabff73bb8c9fbdf1b0d6c7086

    Score
    10/10
    neshtapersistencespywarestealer

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks