Overview

overview

10

Static

static

dridex

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b371b51337e99fcc788bdf4a22f3181a6feebbd663570e5ecebab4778dd46fc6

  • Size

    397KB

  • Sample

    220518-q7vkgsdcbp

  • MD5

    c8fcba7f09eafa1cc3a9c669836e2080

  • SHA1

    797344f986987b380d5d7b4d33b0641e2fc7cee6

  • SHA256

    b371b51337e99fcc788bdf4a22f3181a6feebbd663570e5ecebab4778dd46fc6

  • SHA512

    241391d80a0e56d38732cf8828ccc0bcd1adbee46996df827638a83ed9628865efb9b49c304f69457add58acf8a0df68f39cf36aea9e95cc1b23b37d649db31d

Score
10/10
xmrigevasionminerpersistence

Malware Config

Targets

    • Target

      b371b51337e99fcc788bdf4a22f3181a6feebbd663570e5ecebab4778dd46fc6

    • Size

      397KB

    • MD5

      c8fcba7f09eafa1cc3a9c669836e2080

    • SHA1

      797344f986987b380d5d7b4d33b0641e2fc7cee6

    • SHA256

      b371b51337e99fcc788bdf4a22f3181a6feebbd663570e5ecebab4778dd46fc6

    • SHA512

      241391d80a0e56d38732cf8828ccc0bcd1adbee46996df827638a83ed9628865efb9b49c304f69457add58acf8a0df68f39cf36aea9e95cc1b23b37d649db31d

    Score
    10/10
    xmrigevasionminerpersistence

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner Payload

      miner

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Sets file execution options in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Modifies WinLogon

      persistence

    • Modifies powershell logging option

      evasion
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Command-Line Interface

1
T1059

Persistence

Registry Run Keys / Startup Folder

1
T1060

Winlogon Helper DLL

1
T1004

Privilege Escalation

Defense Evasion

Modify Registry

3
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

3
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks