Overview

overview

8

Static

static

dridex

windows10-1703-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    c463eac51c270011f8819a3c0e115ab78dff8269ab316cf7880e8a85812c413a

  • Size

    330KB

  • Sample

    221222-lpp5tsec43

  • MD5

    6482584dfa537925b65e91c321b8b3e5

  • SHA1

    bdc466bbee3fee3dcde22971dad1acc3b685cf88

  • SHA256

    c463eac51c270011f8819a3c0e115ab78dff8269ab316cf7880e8a85812c413a

  • SHA512

    bb30efa002ec56bcc53ad667b7ef1fab044ea1ad2a92727606a5e5ae7c168f1399d7a4b259742c6a16f2748ae4b8cf6d915506c65f7a6751eb88ac4375f9ea19

  • SSDEEP

    6144:Ti3/L/jLb7w+6ryu5gvM1Se7NBqVv61hJFIJfVAVrwU+:+vzXbspAM37N0d6PHgtyQ

Score
8/10
collectiondiscoveryspywarestealer

Malware Config

Targets

    • Target

      c463eac51c270011f8819a3c0e115ab78dff8269ab316cf7880e8a85812c413a

    • Size

      330KB

    • MD5

      6482584dfa537925b65e91c321b8b3e5

    • SHA1

      bdc466bbee3fee3dcde22971dad1acc3b685cf88

    • SHA256

      c463eac51c270011f8819a3c0e115ab78dff8269ab316cf7880e8a85812c413a

    • SHA512

      bb30efa002ec56bcc53ad667b7ef1fab044ea1ad2a92727606a5e5ae7c168f1399d7a4b259742c6a16f2748ae4b8cf6d915506c65f7a6751eb88ac4375f9ea19

    • SSDEEP

      6144:Ti3/L/jLb7w+6ryu5gvM1Se7NBqVv61hJFIJfVAVrwU+:+vzXbspAM37N0d6PHgtyQ

    Score
    8/10
    collectiondiscoveryspywarestealer

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook accounts

      collection

    • Accesses Microsoft Outlook profiles

      collection

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks