Overview

overview

10

Static

static

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d4eff49ceb37b4991d17972b2947cc6b54960da88df738ec79fff244d51097ea

  • Size

    924KB

  • Sample

    221204-l2y89sch9x

  • MD5

    d9b51f1d12289d5582f12835c91418ad

  • SHA1

    9eefcef8e730c421039ef4fdf13bbc60fa2f3701

  • SHA256

    d4eff49ceb37b4991d17972b2947cc6b54960da88df738ec79fff244d51097ea

  • SHA512

    68e3cca07e95d08ccb2a206815a5edb617a5e492bc34b78ca8c5ead9f095175a64388f7414bb3f2bf88da5acefe5f216b8d457906e5f27c871761497f69dcbe2

  • SSDEEP

    24576:yv7UcZLcpnmFw/hJIpeEIcfTwR4IYjzjJS:alLz3IEIcfMR4IUt

Score
10/10
xmrigminer

Malware Config

Targets

    • Target

      d4eff49ceb37b4991d17972b2947cc6b54960da88df738ec79fff244d51097ea

    • Size

      924KB

    • MD5

      d9b51f1d12289d5582f12835c91418ad

    • SHA1

      9eefcef8e730c421039ef4fdf13bbc60fa2f3701

    • SHA256

      d4eff49ceb37b4991d17972b2947cc6b54960da88df738ec79fff244d51097ea

    • SHA512

      68e3cca07e95d08ccb2a206815a5edb617a5e492bc34b78ca8c5ead9f095175a64388f7414bb3f2bf88da5acefe5f216b8d457906e5f27c871761497f69dcbe2

    • SSDEEP

      24576:yv7UcZLcpnmFw/hJIpeEIcfTwR4IYjzjJS:alLz3IEIcfMR4IUt

    Score
    10/10
    xmrigminer

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks