Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7aa03e3209f84cd78d9926f53318100ca70e451dc6b878b52b124638173a8bee

  • Size

    4.1MB

  • Sample

    221103-ml4pgshce6

  • MD5

    9077d1533235bdcf4890b8f47e56ce04

  • SHA1

    80547cf5975f5d933babcca8daf66c6857927c22

  • SHA256

    7aa03e3209f84cd78d9926f53318100ca70e451dc6b878b52b124638173a8bee

  • SHA512

    213810ba379f8113a1fdea632b1077d1fa434bf07f54cf81e584a19a54d350bd862d75b40c0617539f154489f6919c64ff68ab6e2b9b531d8b91618d65648676

  • SSDEEP

    98304:MP57wv5XF4/0FQBwntBP6/7qw4cHxgk18c++QCy6:ms9OcMwPP6/2wLHxj1D+jK

Score
10/10
gluptebadiscoverydropperevasionloaderpersistencetrojan

Malware Config

Targets

    • Target

      7aa03e3209f84cd78d9926f53318100ca70e451dc6b878b52b124638173a8bee

    • Size

      4.1MB

    • MD5

      9077d1533235bdcf4890b8f47e56ce04

    • SHA1

      80547cf5975f5d933babcca8daf66c6857927c22

    • SHA256

      7aa03e3209f84cd78d9926f53318100ca70e451dc6b878b52b124638173a8bee

    • SHA512

      213810ba379f8113a1fdea632b1077d1fa434bf07f54cf81e584a19a54d350bd862d75b40c0617539f154489f6919c64ff68ab6e2b9b531d8b91618d65648676

    • SSDEEP

      98304:MP57wv5XF4/0FQBwntBP6/7qw4cHxgk18c++QCy6:ms9OcMwPP6/2wLHxj1D+jK

    Score
    10/10
    gluptebadiscoverydropperevasionloaderpersistencetrojan

    • Glupteba

      Glupteba is a modular loader written in Golang with various components.

      loaderdropperglupteba

    • Windows security bypass

      evasiontrojan

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks