Overview

overview

8

Static

static

1

dridex

windows10-1703-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8e36b36d5813065884804b4343b24a86e06e20313ce57d2acc4aa0579d999a3c

  • Size

    316KB

  • Sample

    230208-qegg6aac6y

  • MD5

    75fcc8a6cfd25ce25f4cefa25205f059

  • SHA1

    6bf0fdbb0c4167949967a2574f90e3842ad445e6

  • SHA256

    8e36b36d5813065884804b4343b24a86e06e20313ce57d2acc4aa0579d999a3c

  • SHA512

    a66596fe2e4588c7e3e11cfeec0d4ebd4f6a90438d12d9d3323ef5f53c34274516e20f10b73213969fba69fcc9336a8e7057e19f1905f4f7b6d60e6a976138e4

  • SSDEEP

    3072:zwayTdWD+B7A6/OW7uvR9up0ExVfo+2OxiFd1RLStKRxhUwJ:zq48Aw9uHe0Ex1bPW1gtKB

Score
8/10

Malware Config

Targets

    • Target

      8e36b36d5813065884804b4343b24a86e06e20313ce57d2acc4aa0579d999a3c

    • Size

      316KB

    • MD5

      75fcc8a6cfd25ce25f4cefa25205f059

    • SHA1

      6bf0fdbb0c4167949967a2574f90e3842ad445e6

    • SHA256

      8e36b36d5813065884804b4343b24a86e06e20313ce57d2acc4aa0579d999a3c

    • SHA512

      a66596fe2e4588c7e3e11cfeec0d4ebd4f6a90438d12d9d3323ef5f53c34274516e20f10b73213969fba69fcc9336a8e7057e19f1905f4f7b6d60e6a976138e4

    • SSDEEP

      3072:zwayTdWD+B7A6/OW7uvR9up0ExVfo+2OxiFd1RLStKRxhUwJ:zq48Aw9uHe0Ex1bPW1gtKB

    Score
    8/10

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks