Overview

overview

8

Static

static

dridex

windows10-1703-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    ad010e36e47b8c3052f3e5afff646b8060c8081a0a330638d82f53dc003649a2

  • Size

    230KB

  • Sample

    221226-rj8b4sgc3z

  • MD5

    557e9a3db30c584a613d8fe9cd79e3c4

  • SHA1

    1146db60ef66cfd8d5fd80ec436f41459d4fe4ff

  • SHA256

    ad010e36e47b8c3052f3e5afff646b8060c8081a0a330638d82f53dc003649a2

  • SHA512

    b07f6ddb86e84e2809d08576243de5181d1f70bf782d3bc1963143a6729a77d9554bb44177ae0cfffc12a5cda77a90ea8bfbb220c7de3537b80f14e3a6465ab2

  • SSDEEP

    3072:CRt/QLSLy575epD5sqUnxa4yezh1EbC24Kjaq+DjLpt5nLmM+V+Y700:vLum5ADCLzh64n7nH5LmM+Vl7l

Score
8/10

Malware Config

Targets

    • Target

      ad010e36e47b8c3052f3e5afff646b8060c8081a0a330638d82f53dc003649a2

    • Size

      230KB

    • MD5

      557e9a3db30c584a613d8fe9cd79e3c4

    • SHA1

      1146db60ef66cfd8d5fd80ec436f41459d4fe4ff

    • SHA256

      ad010e36e47b8c3052f3e5afff646b8060c8081a0a330638d82f53dc003649a2

    • SHA512

      b07f6ddb86e84e2809d08576243de5181d1f70bf782d3bc1963143a6729a77d9554bb44177ae0cfffc12a5cda77a90ea8bfbb220c7de3537b80f14e3a6465ab2

    • SSDEEP

      3072:CRt/QLSLy575epD5sqUnxa4yezh1EbC24Kjaq+DjLpt5nLmM+V+Y700:vLum5ADCLzh64n7nH5LmM+Vl7l

    Score
    8/10

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks