Overview

overview

10

Static

static

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1b0167b65c9b113f44d38ae3a49d67adff514a7b354fd2809c619c458b8e6e06

  • Size

    3.0MB

  • Sample

    221107-nqgaesgcap

  • MD5

    c766d0165cf4337e52985a58b03f2a91

  • SHA1

    85a82f096757f309d47fa64f5cb7ab2faaff158b

  • SHA256

    1b0167b65c9b113f44d38ae3a49d67adff514a7b354fd2809c619c458b8e6e06

  • SHA512

    59c98c7a647302f1e9aa4c2a645068ec9766082262f7e5e04b6c7b3f7ff842ef37655861bb92035b9ef498a97c7924a20c4e4c5148922fe1849d3d55aa8162c5

  • SSDEEP

    49152:tBiD61h+tHbmYIm7oOIBJJFgNEe0GkOL1F6eQ+hdAwUXuQgVS/:GDGtzmNEejzS/

Score
10/10
xmrigminer

Malware Config

Targets

    • Target

      1b0167b65c9b113f44d38ae3a49d67adff514a7b354fd2809c619c458b8e6e06

    • Size

      3.0MB

    • MD5

      c766d0165cf4337e52985a58b03f2a91

    • SHA1

      85a82f096757f309d47fa64f5cb7ab2faaff158b

    • SHA256

      1b0167b65c9b113f44d38ae3a49d67adff514a7b354fd2809c619c458b8e6e06

    • SHA512

      59c98c7a647302f1e9aa4c2a645068ec9766082262f7e5e04b6c7b3f7ff842ef37655861bb92035b9ef498a97c7924a20c4e4c5148922fe1849d3d55aa8162c5

    • SSDEEP

      49152:tBiD61h+tHbmYIm7oOIBJJFgNEe0GkOL1F6eQ+hdAwUXuQgVS/:GDGtzmNEejzS/

    Score
    10/10
    xmrigminer

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks