Overview

overview

10

Static

static

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    101387858898c5dc0102bfd2b57fe50707dd002c093a4dc596bf3e7e854f6880

  • Size

    220KB

  • Sample

    230126-xg7wfseh43

  • MD5

    8463849a48326c8b46c38717c30a7acc

  • SHA1

    5c81ea3b2a013b8736872f2d667ba4bc42f4544e

  • SHA256

    101387858898c5dc0102bfd2b57fe50707dd002c093a4dc596bf3e7e854f6880

  • SHA512

    32ecc9c2bc1ae18dae8ac3a832e375faad7d1b426f826872b17d54b766fd2411048960a19c85a2ec8371f3497396514f517216d903074bdb81487dc441247d20

  • SSDEEP

    3072:vLQ3jFFRmQukKxwumnIU2bQ3/Ksg+O/J/Ksg+O/XWf+/Ksg+O/Ti:XQukK6hn3/Ksgz/KsgE+/Ksgk

Score
10/10
lgoogloaderdownloaderpersistence

Malware Config

Targets

    • Target

      101387858898c5dc0102bfd2b57fe50707dd002c093a4dc596bf3e7e854f6880

    • Size

      220KB

    • MD5

      8463849a48326c8b46c38717c30a7acc

    • SHA1

      5c81ea3b2a013b8736872f2d667ba4bc42f4544e

    • SHA256

      101387858898c5dc0102bfd2b57fe50707dd002c093a4dc596bf3e7e854f6880

    • SHA512

      32ecc9c2bc1ae18dae8ac3a832e375faad7d1b426f826872b17d54b766fd2411048960a19c85a2ec8371f3497396514f517216d903074bdb81487dc441247d20

    • SSDEEP

      3072:vLQ3jFFRmQukKxwumnIU2bQ3/Ksg+O/J/Ksg+O/XWf+/Ksg+O/Ti:XQukK6hn3/Ksgz/KsgE+/Ksgk

    Score
    10/10
    lgoogloaderdownloaderpersistence

    • Detects LgoogLoader payload

    • LgoogLoader

      A downloader capable of dropping and executing other malware families.

      downloaderlgoogloader

    • Sets service image path in registry

      persistence

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks