Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    35ab6933aba188dddc68788ed02ee1f72894933331a110606af6cc9448045652

  • Size

    375KB

  • Sample

    220907-ka3a6sgfdq

  • MD5

    ec58e02fb30073df2693487b65121774

  • SHA1

    1d4c8c854b7b1c277270cfc894108c619e2b7b1d

  • SHA256

    35ab6933aba188dddc68788ed02ee1f72894933331a110606af6cc9448045652

  • SHA512

    7dac4dd56f8dcb782bc6e5217a9b6a48d39b074bca13ed9ed1a26a0b300c248af075ed5b04fd40d5e0e56f832c6912c8c0ac2f6b0766d535866473b441259eae

  • SSDEEP

    6144:Hv5zQJVb5p72cHF1ybDFwekh212KhvwIb759QOaBjpaVRPu23E2rJmWjFc94:H4VOiF1WD7kE1dTYOi8V5u23zmWFy4

Score
10/10
gh0stratratupx

Malware Config

Targets

    • Target

      35ab6933aba188dddc68788ed02ee1f72894933331a110606af6cc9448045652

    • Size

      375KB

    • MD5

      ec58e02fb30073df2693487b65121774

    • SHA1

      1d4c8c854b7b1c277270cfc894108c619e2b7b1d

    • SHA256

      35ab6933aba188dddc68788ed02ee1f72894933331a110606af6cc9448045652

    • SHA512

      7dac4dd56f8dcb782bc6e5217a9b6a48d39b074bca13ed9ed1a26a0b300c248af075ed5b04fd40d5e0e56f832c6912c8c0ac2f6b0766d535866473b441259eae

    • SSDEEP

      6144:Hv5zQJVb5p72cHF1ybDFwekh212KhvwIb759QOaBjpaVRPu23E2rJmWjFc94:H4VOiF1WD7kE1dTYOi8V5u23zmWFy4

    Score
    10/10
    gh0stratratupx

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks