Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    678c05e87b07f6f9a979ae0f032956baf9ccb338aec4b50af77284d62fc97688

  • Size

    1.1MB

  • Sample

    220810-rjd39sdag7

  • MD5

    b603ce4a15e89ee253d97c1b1deb4941

  • SHA1

    9a436e302870bbb2460fb6824333a170df577b95

  • SHA256

    678c05e87b07f6f9a979ae0f032956baf9ccb338aec4b50af77284d62fc97688

  • SHA512

    3e82f7b6db17b094543e5e29d6c11c643b403809ff3ea6f541b71a778c498664afe63e1a5196b1c2d058233cfad3fd88851629490809d3234a0ca9f1787d2f93

Score
10/10
icexloaderloaderpersistence

Malware Config

Targets

    • Target

      678c05e87b07f6f9a979ae0f032956baf9ccb338aec4b50af77284d62fc97688

    • Size

      1.1MB

    • MD5

      b603ce4a15e89ee253d97c1b1deb4941

    • SHA1

      9a436e302870bbb2460fb6824333a170df577b95

    • SHA256

      678c05e87b07f6f9a979ae0f032956baf9ccb338aec4b50af77284d62fc97688

    • SHA512

      3e82f7b6db17b094543e5e29d6c11c643b403809ff3ea6f541b71a778c498664afe63e1a5196b1c2d058233cfad3fd88851629490809d3234a0ca9f1787d2f93

    Score
    10/10
    icexloaderloaderpersistence

    • Detects IceXLoader v3.0

    • icexloader

      IceXLoader is a downloader used to deliver other malware families.

      loadericexloader

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks