Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d419a9829907a0fc7d0e2bbae1b4caaac1ccaf52b545b44877431b1f62bb9699

  • Size

    375KB

  • Sample

    220913-dtln7sachk

  • MD5

    d7d53341ad1433fd35b3a724767ba290

  • SHA1

    42f1d5665a4f05e4398a4f82848f7fe113d3f9b6

  • SHA256

    d419a9829907a0fc7d0e2bbae1b4caaac1ccaf52b545b44877431b1f62bb9699

  • SHA512

    7ad4d5912c7a82b5abf6a2a47af96fef4cb432eac2f38236171b922ea105ef1c685ba73fb43af0a55d18a8b0b2b648d6f17d6da963e211f72f461d41ba9de32e

  • SSDEEP

    6144:7v5zQJVb5p72cHF1ybDFwekh212KhvwIb759QOaBjpaVRPu23E2rJmWjFc94:74VOiF1WD7kE1dTYOi8V5u23zmWFy4

Score
10/10
gh0stratratupx

Malware Config

Targets

    • Target

      d419a9829907a0fc7d0e2bbae1b4caaac1ccaf52b545b44877431b1f62bb9699

    • Size

      375KB

    • MD5

      d7d53341ad1433fd35b3a724767ba290

    • SHA1

      42f1d5665a4f05e4398a4f82848f7fe113d3f9b6

    • SHA256

      d419a9829907a0fc7d0e2bbae1b4caaac1ccaf52b545b44877431b1f62bb9699

    • SHA512

      7ad4d5912c7a82b5abf6a2a47af96fef4cb432eac2f38236171b922ea105ef1c685ba73fb43af0a55d18a8b0b2b648d6f17d6da963e211f72f461d41ba9de32e

    • SSDEEP

      6144:7v5zQJVb5p72cHF1ybDFwekh212KhvwIb759QOaBjpaVRPu23E2rJmWjFc94:74VOiF1WD7kE1dTYOi8V5u23zmWFy4

    Score
    10/10
    gh0stratratupx

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks