Overview

overview

8

Static

static

dridex

windows10-1703-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    1a84f0f7cfcefcb62afb47a53a020d8c045c5c8c6c3dceffef29bbf5a1a0c6c9

  • Size

    720KB

  • Sample

    220918-ttcz3abdh9

  • MD5

    ad993cefed563f89dfb2ca56ed679448

  • SHA1

    e98bc631b7ca17ca23b08d001d9bd6dfedbee376

  • SHA256

    1a84f0f7cfcefcb62afb47a53a020d8c045c5c8c6c3dceffef29bbf5a1a0c6c9

  • SHA512

    1dc0ac510b19807031c9a42ad28c1f41b2c45e9c5cb8ffe259108e52e1f47a4f9fc9b8634ce4db26a656173ae2bbe2b109f80c3bc2d04ded3e80ff62920caf29

  • SSDEEP

    768:rZmchlXKGREW6VA6joSRhFH+C9Pe2auEqainmngYWxuv8Gwmwoe9R4ZstojtfcWv:schl6M+lpDCUoHid0bIrlyR

Score
8/10
persistence

Malware Config

Targets

    • Target

      1a84f0f7cfcefcb62afb47a53a020d8c045c5c8c6c3dceffef29bbf5a1a0c6c9

    • Size

      720KB

    • MD5

      ad993cefed563f89dfb2ca56ed679448

    • SHA1

      e98bc631b7ca17ca23b08d001d9bd6dfedbee376

    • SHA256

      1a84f0f7cfcefcb62afb47a53a020d8c045c5c8c6c3dceffef29bbf5a1a0c6c9

    • SHA512

      1dc0ac510b19807031c9a42ad28c1f41b2c45e9c5cb8ffe259108e52e1f47a4f9fc9b8634ce4db26a656173ae2bbe2b109f80c3bc2d04ded3e80ff62920caf29

    • SSDEEP

      768:rZmchlXKGREW6VA6joSRhFH+C9Pe2auEqainmngYWxuv8Gwmwoe9R4ZstojtfcWv:schl6M+lpDCUoHid0bIrlyR

    Score
    8/10
    persistence

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks