Overview

overview

8

Static

static

dridex

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a0c1f927cfcafa7a279dcc11a75984cd8e93afa07fcf8c8a903fb296d09878e6

  • Size

    372KB

  • Sample

    211210-qv6rzshhgk

  • MD5

    6fcf1c2c331be34cf85ac994d5036359

  • SHA1

    b776b975854a59862a16f8042353ae71554bdd3a

  • SHA256

    a0c1f927cfcafa7a279dcc11a75984cd8e93afa07fcf8c8a903fb296d09878e6

  • SHA512

    8338ed9d3a81716cab30da8b9a3a0e6e8ea876a668e1839edcf7b5f2a9632f93336142a9e4563d418fa1d176114f500476a33637bf8cad3c180a81e421d9581c

Score
8/10
evasionupx

Malware Config

Targets

    • Target

      a0c1f927cfcafa7a279dcc11a75984cd8e93afa07fcf8c8a903fb296d09878e6

    • Size

      372KB

    • MD5

      6fcf1c2c331be34cf85ac994d5036359

    • SHA1

      b776b975854a59862a16f8042353ae71554bdd3a

    • SHA256

      a0c1f927cfcafa7a279dcc11a75984cd8e93afa07fcf8c8a903fb296d09878e6

    • SHA512

      8338ed9d3a81716cab30da8b9a3a0e6e8ea876a668e1839edcf7b5f2a9632f93336142a9e4563d418fa1d176114f500476a33637bf8cad3c180a81e421d9581c

    Score
    8/10
    evasionupx

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Stops running service(s)

      evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

1
T1031

Privilege Escalation

Defense Evasion

Impair Defenses

1
T1562

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Service Stop

1
T1489

Tasks