Overview

overview

8

Static

static

dridex

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    b1b5b5b3c3f9517c5ba58c5b1fe5cbac3898e2ed31289926ebe21da8cb7ee5e4

  • Size

    724KB

  • Sample

    220923-m2fmlaaabn

  • MD5

    fd906ea2583a4cf3c3e0025bee3f9582

  • SHA1

    6dd57b70a2ee53d5bd4d58c23dcc25159be3ff1d

  • SHA256

    b1b5b5b3c3f9517c5ba58c5b1fe5cbac3898e2ed31289926ebe21da8cb7ee5e4

  • SHA512

    c6169978e89e32b0627d59077e44f8edfb036d92b4fde464b4860e99dc9d7a99fac8d7d257de296b8fc5bb35317428d1afc6cd8c98e255143424d7e910ad8992

  • SSDEEP

    768:rZmchlXKGREW6VA6joSRhFH+C9Pe2auEqainmngYWxuv8Gwmwoe9R4ZstojtfcWv:schl6M+lpDCUoHid0bIrlyR

Score
8/10
persistence

Malware Config

Targets

    • Target

      b1b5b5b3c3f9517c5ba58c5b1fe5cbac3898e2ed31289926ebe21da8cb7ee5e4

    • Size

      724KB

    • MD5

      fd906ea2583a4cf3c3e0025bee3f9582

    • SHA1

      6dd57b70a2ee53d5bd4d58c23dcc25159be3ff1d

    • SHA256

      b1b5b5b3c3f9517c5ba58c5b1fe5cbac3898e2ed31289926ebe21da8cb7ee5e4

    • SHA512

      c6169978e89e32b0627d59077e44f8edfb036d92b4fde464b4860e99dc9d7a99fac8d7d257de296b8fc5bb35317428d1afc6cd8c98e255143424d7e910ad8992

    • SSDEEP

      768:rZmchlXKGREW6VA6joSRhFH+C9Pe2auEqainmngYWxuv8Gwmwoe9R4ZstojtfcWv:schl6M+lpDCUoHid0bIrlyR

    Score
    8/10
    persistence

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks