Overview

overview

8

Static

static

dridex

windows10-1703-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8f530d54889c052a17cfe67c58b2c916decf9607ced0ac05206a82678693827a

  • Size

    366KB

  • Sample

    230104-ydyztahe33

  • MD5

    f6fb5487e42997f9781efc4481214f81

  • SHA1

    032a53bfa94f4dc6dbfee8e18576d4fa59142acc

  • SHA256

    8f530d54889c052a17cfe67c58b2c916decf9607ced0ac05206a82678693827a

  • SHA512

    8c5f666205de84974e72d855f0c072ea5d7c04b38927c760933085217a226ecb7b998493ff6204996e109671781c283097bb5f04c8918a3a4bfcc00eca813752

  • SSDEEP

    3072:KhXMv+6LUvZchw0p5to8F8plMQ3mK+oeMrciNbN8jdA4upFldiLLkMUAxYjTis4:yyLUvWw0J3i7WKneMzJNoxupmLpEjT

Score
8/10

Malware Config

Targets

    • Target

      8f530d54889c052a17cfe67c58b2c916decf9607ced0ac05206a82678693827a

    • Size

      366KB

    • MD5

      f6fb5487e42997f9781efc4481214f81

    • SHA1

      032a53bfa94f4dc6dbfee8e18576d4fa59142acc

    • SHA256

      8f530d54889c052a17cfe67c58b2c916decf9607ced0ac05206a82678693827a

    • SHA512

      8c5f666205de84974e72d855f0c072ea5d7c04b38927c760933085217a226ecb7b998493ff6204996e109671781c283097bb5f04c8918a3a4bfcc00eca813752

    • SSDEEP

      3072:KhXMv+6LUvZchw0p5to8F8plMQ3mK+oeMrciNbN8jdA4upFldiLLkMUAxYjTis4:yyLUvWw0J3i7WKneMzJNoxupmLpEjT

    Score
    8/10

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks