Overview

overview

10

Static

static

10

dridex

windows10_x64

10

Analysis

  • max time kernel
    88s
  • max time network
    150s
  • platform
    windows10_x64
  • resource
    win10-20220414-en
  • submitted
    12-05-2022 06:54

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5b60d2cb0b63bcd9c7df5873496d119de3f5364ba6eeea8548f20b2940a73ffa.exe

  • Size

    3.9MB

  • MD5

    5c21cca8d79a5c46f7f1bd78b222c47a

  • SHA1

    bd249dea8ceb0a4bde6ee336ed2063696b821767

  • SHA256

    5b60d2cb0b63bcd9c7df5873496d119de3f5364ba6eeea8548f20b2940a73ffa

  • SHA512

    1f63c24f59d5508a81e371e8c4ab8f11ce1c61a31fb78ecefdbe3d59d5e62eb281bda61e507642b92f3a897b11b0a3b0dcee3369cb78686097c91c91b08108d7

Score
10/10
ffdroiderstealer

Malware Config

Signatures

  • FFDroider

    Stealer targeting social media platform users first seen in April 2022.

    stealerffdroider
  • FFDroider Payload 1 IoCs
  • Downloads MZ/PE file
  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5b60d2cb0b63bcd9c7df5873496d119de3f5364ba6eeea8548f20b2940a73ffa.exe
    "C:\Users\Admin\AppData\Local\Temp\5b60d2cb0b63bcd9c7df5873496d119de3f5364ba6eeea8548f20b2940a73ffa.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:2236

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2236-114-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-115-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-116-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-117-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-118-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-119-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-120-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-121-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-122-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-123-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-124-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-125-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-126-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-127-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-128-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-129-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-130-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-131-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-132-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-133-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-134-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-135-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-136-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-137-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-139-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-140-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-141-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-142-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-143-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-144-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-148-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-151-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-153-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-155-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-158-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-161-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-162-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-163-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-160-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-159-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-157-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-156-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-154-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-152-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-150-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-149-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-147-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-146-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-145-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-138-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-164-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-165-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-166-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-167-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-168-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-169-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-170-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-171-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-172-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-173-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-174-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-175-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-176-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-177-0x0000000077390000-0x000000007751E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2236-185-0x0000000000400000-0x00000000009BC000-memory.dmp

    Filesize

    5.7MB

    Download