Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f3e42b1c2294c88082b6c90737f43ca6e0244caa05d8551b16c5a55b6df5dc1e

  • Size

    375KB

  • Sample

    220919-fcvlwscfdk

  • MD5

    c1f6da9bb3c78425f7083e9ee266c8da

  • SHA1

    42fb83cb4b46e3b58d4159e9774d6edd239ffcb5

  • SHA256

    f3e42b1c2294c88082b6c90737f43ca6e0244caa05d8551b16c5a55b6df5dc1e

  • SHA512

    bc846acfc520660bab1d4c921d49e509af353ed0bd029d7c42db2ce5cae2ffc6f7d8431519ed7b291c3b6d1e19f515fea96b3162bafc5bdb594eaffaabc531b8

  • SSDEEP

    6144:mv5zQJVb5p72cHF1ybDFwekh212KhvwIb759QOaBjpaVRPu23E2rJmWjFc94:m4VOiF1WD7kE1dTYOi8V5u23zmWFy4

Score
10/10
gh0stratratupx

Malware Config

Targets

    • Target

      f3e42b1c2294c88082b6c90737f43ca6e0244caa05d8551b16c5a55b6df5dc1e

    • Size

      375KB

    • MD5

      c1f6da9bb3c78425f7083e9ee266c8da

    • SHA1

      42fb83cb4b46e3b58d4159e9774d6edd239ffcb5

    • SHA256

      f3e42b1c2294c88082b6c90737f43ca6e0244caa05d8551b16c5a55b6df5dc1e

    • SHA512

      bc846acfc520660bab1d4c921d49e509af353ed0bd029d7c42db2ce5cae2ffc6f7d8431519ed7b291c3b6d1e19f515fea96b3162bafc5bdb594eaffaabc531b8

    • SSDEEP

      6144:mv5zQJVb5p72cHF1ybDFwekh212KhvwIb759QOaBjpaVRPu23E2rJmWjFc94:m4VOiF1WD7kE1dTYOi8V5u23zmWFy4

    Score
    10/10
    gh0stratratupx

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks