Overview

overview

8

Static

static

dridex

windows10-1703-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    3703c52d0b08807d5d00526d39ec602da5a9ffb7a1a2c80bf6485b1a0b48c595

  • Size

    720KB

  • Sample

    220918-b1b28saeg5

  • MD5

    9e20e7b31546f2f1765d4da7898afdf8

  • SHA1

    02b74f98604e629583f7e1dd1d0d49b0ad16ad19

  • SHA256

    3703c52d0b08807d5d00526d39ec602da5a9ffb7a1a2c80bf6485b1a0b48c595

  • SHA512

    01622be38be566b7bafe0641da0b27aa882565c66a01178cbfa142a3be388f6a4ed6d4d63f8b6ba3f5f94e49316e66bcaf1891f053a58406e0ef33ca0e2b4c10

  • SSDEEP

    768:rZmchlXKGREW6VA6joSRhFH+C9Pe2auEqainmngYWxuv8Gwmwoe9R4ZstojtfcWv:schl6M+lpDCUoHid0bIrlyR

Score
8/10
persistence

Malware Config

Targets

    • Target

      3703c52d0b08807d5d00526d39ec602da5a9ffb7a1a2c80bf6485b1a0b48c595

    • Size

      720KB

    • MD5

      9e20e7b31546f2f1765d4da7898afdf8

    • SHA1

      02b74f98604e629583f7e1dd1d0d49b0ad16ad19

    • SHA256

      3703c52d0b08807d5d00526d39ec602da5a9ffb7a1a2c80bf6485b1a0b48c595

    • SHA512

      01622be38be566b7bafe0641da0b27aa882565c66a01178cbfa142a3be388f6a4ed6d4d63f8b6ba3f5f94e49316e66bcaf1891f053a58406e0ef33ca0e2b4c10

    • SSDEEP

      768:rZmchlXKGREW6VA6joSRhFH+C9Pe2auEqainmngYWxuv8Gwmwoe9R4ZstojtfcWv:schl6M+lpDCUoHid0bIrlyR

    Score
    8/10
    persistence

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks