Overview

overview

8

Static

static

dridex

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    83464e0024db97fa523ccf61844769dc3921ac88974012f8534e9921c67ef59b

  • Size

    1.1MB

  • Sample

    230111-ts67hshd4t

  • MD5

    e5763d61c121189b79720a50d0c26927

  • SHA1

    17e8a7e41480bdb1de3bc1f0f086d59ff8d22f2a

  • SHA256

    83464e0024db97fa523ccf61844769dc3921ac88974012f8534e9921c67ef59b

  • SHA512

    da0093375a2358acd9859fbb2e3127085ae58f9f7ff3769f9dbe9677604462814c5ea881004aa2dc4e91b161e4ef722c92149429edd9700b68704699f8196a08

  • SSDEEP

    24576:6/mtyrmZQ/dQzPJzXU8pWVbjzL2xIa8Wm/Q28gR3IvtQxC:6Cp0dKRTLpkzK3rOR3I1Q

Score
8/10
collectiondiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      83464e0024db97fa523ccf61844769dc3921ac88974012f8534e9921c67ef59b

    • Size

      1.1MB

    • MD5

      e5763d61c121189b79720a50d0c26927

    • SHA1

      17e8a7e41480bdb1de3bc1f0f086d59ff8d22f2a

    • SHA256

      83464e0024db97fa523ccf61844769dc3921ac88974012f8534e9921c67ef59b

    • SHA512

      da0093375a2358acd9859fbb2e3127085ae58f9f7ff3769f9dbe9677604462814c5ea881004aa2dc4e91b161e4ef722c92149429edd9700b68704699f8196a08

    • SSDEEP

      24576:6/mtyrmZQ/dQzPJzXU8pWVbjzL2xIa8Wm/Q28gR3IvtQxC:6Cp0dKRTLpkzK3rOR3I1Q

    Score
    8/10
    collectiondiscoverypersistencespywarestealer

    • Blocklisted process makes network request

    • Sets DLL path for service in the registry

      persistence

    • Sets service image path in registry

      persistence

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook accounts

      collection

    • Accesses Microsoft Outlook profiles

      collection

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks