Overview

overview

10

Static

static

10

dridex

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    e31bf9a8289456a919dd8956bf6be04ff99943649cee6d4f57a92cd47791a34d
  • Size 202KB
  • Sample220612-vdmp1aceb3
  • SHA256 e31bf9a8289456a919dd8956bf6be04ff99943649cee6d4f57a92cd47791a34d
  • MD5 SHA1 SHA512
Score
10/10
blackguardpersistencestealersuricata

Malware Config

Targets

    • Target
      e31bf9a8289456a919dd8956bf6be04ff99943649cee6d4f57a92cd47791a34d
    • Size 202KB
    • SHA256 e31bf9a8289456a919dd8956bf6be04ff99943649cee6d4f57a92cd47791a34d
    • MD5 SHA1 SHA512
    Score
    10/10
    blackguardpersistencestealersuricata

    • BlackGuard

      Infostealer first seen in Late 2021.

      stealerblackguard

    • suricata: ET MALWARE Generic Request to gate.php Dotted-Quad

      suricata: ET MALWARE Generic Request to gate.php Dotted-Quad

      suricata

    • suricata: ET MALWARE Generic gate .php GET with minimal headers

      suricata: ET MALWARE Generic gate .php GET with minimal headers

      suricata

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks