Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    329d010136800ed1bdd818e596ced78511f434114ca9d5b5db6f45ad45208138

  • Size

    375KB

  • Sample

    220907-qa99nshdcm

  • MD5

    c00a9277b6752d3616d287a65852414a

  • SHA1

    0c8bc8448ed8708d60741fedc5d5f7e43d380d99

  • SHA256

    329d010136800ed1bdd818e596ced78511f434114ca9d5b5db6f45ad45208138

  • SHA512

    f3f0d487d16c462845cff6a17b9e0f137ea40b02db308d286cfb816d477dbac92ec1856a76b1ce66c132431fcac504083e4915c5d03f841eb2c459e71d037daa

  • SSDEEP

    6144:ev5zQJVb5p72cHF1ybDFwekh212KhvwIb759QOaBjpaVRPu23E2rJmWjFc94:e4VOiF1WD7kE1dTYOi8V5u23zmWFy4

Score
10/10
gh0stratratupx

Malware Config

Targets

    • Target

      329d010136800ed1bdd818e596ced78511f434114ca9d5b5db6f45ad45208138

    • Size

      375KB

    • MD5

      c00a9277b6752d3616d287a65852414a

    • SHA1

      0c8bc8448ed8708d60741fedc5d5f7e43d380d99

    • SHA256

      329d010136800ed1bdd818e596ced78511f434114ca9d5b5db6f45ad45208138

    • SHA512

      f3f0d487d16c462845cff6a17b9e0f137ea40b02db308d286cfb816d477dbac92ec1856a76b1ce66c132431fcac504083e4915c5d03f841eb2c459e71d037daa

    • SSDEEP

      6144:ev5zQJVb5p72cHF1ybDFwekh212KhvwIb759QOaBjpaVRPu23E2rJmWjFc94:e4VOiF1WD7kE1dTYOi8V5u23zmWFy4

    Score
    10/10
    gh0stratratupx

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks