Overview

overview

6

Static

static

dridex

windows10_x64

6

Analysis

  • max time kernel
    95s
  • max time network
    97s
  • platform
    windows10_x64
  • resource
    win10-20220414-en
  • submitted
    26-05-2022 03:08

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5e8e327bccfd9111940c717c7c004a9af93c5de11d0ff7162997f44fafddcc84.exe

  • Size

    624KB

  • MD5

    029abe597fbdeac440b69cad9fee4f35

  • SHA1

    54dded550a49dc996270794f0fd145a2269a6dba

  • SHA256

    5e8e327bccfd9111940c717c7c004a9af93c5de11d0ff7162997f44fafddcc84

  • SHA512

    a31adee1738e302f16f9d8ebfb93ed6e3af34305a6bb5be6a5df1e688ede2cb60657bcb82c94b88dc5a966a9626b09d0d389f6f0b5daf8ea6c0c4a90ef06b312

Score
6/10
bootkitpersistence

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

    bootkitpersistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\5e8e327bccfd9111940c717c7c004a9af93c5de11d0ff7162997f44fafddcc84.exe
    "C:\Users\Admin\AppData\Local\Temp\5e8e327bccfd9111940c717c7c004a9af93c5de11d0ff7162997f44fafddcc84.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:652

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

1
T1067

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/652-118-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-119-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-120-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-121-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-122-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-123-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-124-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-125-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-126-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-127-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-128-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-129-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-130-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-131-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-132-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-133-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-134-0x0000000000B87000-0x0000000000BE7000-memory.dmp
    Filesize

    384KB

    Download
  • memory/652-135-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-136-0x0000000000A80000-0x0000000000BCA000-memory.dmp
    Filesize

    1.3MB

    Download
  • memory/652-138-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-137-0x0000000002610000-0x000000000267B000-memory.dmp
    Filesize

    428KB

    Download
  • memory/652-139-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-140-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-141-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-142-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-143-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-144-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-145-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-146-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-147-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-148-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-149-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-150-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-151-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-152-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-153-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-154-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-155-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-156-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-157-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-158-0x0000000000400000-0x0000000000965000-memory.dmp
    Filesize

    5.4MB

    Download
  • memory/652-159-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/652-160-0x0000000000400000-0x0000000000965000-memory.dmp
    Filesize

    5.4MB

    Download
  • memory/652-161-0x0000000077010000-0x000000007719E000-memory.dmp
    Filesize

    1.6MB

    Download