Overview

overview

8

Static

static

dridex

windows10-1703-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    f7c89b0248094104724ec3f14d41779801ab3ef1a72c6059a13f4db31e9272ed

  • Size

    731KB

  • Sample

    221005-php32aeedk

  • MD5

    b9327d764425a3de06b11d3c7c6278c8

  • SHA1

    d80d898ea77a5ce9640d3a2f88a2277afe5b7d87

  • SHA256

    f7c89b0248094104724ec3f14d41779801ab3ef1a72c6059a13f4db31e9272ed

  • SHA512

    84268e3500b3a5eaec54ca4561d2b6d6898db521eb989ed8b7b9a7f21c01f78346bbb4302efa50c3cb2956f96f0398d37d6d46df4f168177282fa18f4bad30e0

  • SSDEEP

    768:rZmchlXKGREW6VA6joSRhFH+C9Pe2auEqainmngYWxuv8Gwmwoe9R4ZstojtfcWv:schl6M+lpDCUoHid0bIrlyR

Score
8/10
persistence

Malware Config

Targets

    • Target

      f7c89b0248094104724ec3f14d41779801ab3ef1a72c6059a13f4db31e9272ed

    • Size

      731KB

    • MD5

      b9327d764425a3de06b11d3c7c6278c8

    • SHA1

      d80d898ea77a5ce9640d3a2f88a2277afe5b7d87

    • SHA256

      f7c89b0248094104724ec3f14d41779801ab3ef1a72c6059a13f4db31e9272ed

    • SHA512

      84268e3500b3a5eaec54ca4561d2b6d6898db521eb989ed8b7b9a7f21c01f78346bbb4302efa50c3cb2956f96f0398d37d6d46df4f168177282fa18f4bad30e0

    • SSDEEP

      768:rZmchlXKGREW6VA6joSRhFH+C9Pe2auEqainmngYWxuv8Gwmwoe9R4ZstojtfcWv:schl6M+lpDCUoHid0bIrlyR

    Score
    8/10
    persistence

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks