Overview

overview

8

Static

static

dridex

windows10-1703-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    ee8601daf173de7abca7dbe5335a6d9511de07fa40cdec51d0a82246575a35cd

  • Size

    145KB

  • Sample

    221003-mqk3yahdhq

  • MD5

    159f37708b512293a6702e51fc0afa93

  • SHA1

    95fdff85dfeab8b30b25c26cbc62ea53eeacafd1

  • SHA256

    ee8601daf173de7abca7dbe5335a6d9511de07fa40cdec51d0a82246575a35cd

  • SHA512

    00e6fa096d50e206c45105361074bbb50816cffa0b25e49d2d98cc38ac29403ffc2af262a4a1d634d2ab610279f3cae0f97fdf7860d9088946b683f0afd9f777

  • SSDEEP

    3072:ceiakXZCNvlCgpI6VI8KiQbDQ50+U6HiNIYOUEulqYPfe:ce5Pu8dLU6HyI9UXcmf

Score
8/10

Malware Config

Targets

    • Target

      ee8601daf173de7abca7dbe5335a6d9511de07fa40cdec51d0a82246575a35cd

    • Size

      145KB

    • MD5

      159f37708b512293a6702e51fc0afa93

    • SHA1

      95fdff85dfeab8b30b25c26cbc62ea53eeacafd1

    • SHA256

      ee8601daf173de7abca7dbe5335a6d9511de07fa40cdec51d0a82246575a35cd

    • SHA512

      00e6fa096d50e206c45105361074bbb50816cffa0b25e49d2d98cc38ac29403ffc2af262a4a1d634d2ab610279f3cae0f97fdf7860d9088946b683f0afd9f777

    • SSDEEP

      3072:ceiakXZCNvlCgpI6VI8KiQbDQ50+U6HiNIYOUEulqYPfe:ce5Pu8dLU6HyI9UXcmf

    Score
    8/10

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Deletes itself

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks