Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    258c424258da02b0ee7e091b0fc689de0977b7d79e386094c593401222a98540

  • Size

    1.6MB

  • Sample

    230212-kkyqqsba21

  • MD5

    a1ab8ca7cee41564cde313f0d947166a

  • SHA1

    bfbb4e15365aaac6a79260467f261405af20c27f

  • SHA256

    258c424258da02b0ee7e091b0fc689de0977b7d79e386094c593401222a98540

  • SHA512

    f45f078a0a8062ceb6e58d640c02cce7a279ee5ca38698a9f90f76f8873dd68e29041437e930c2c14fb0c91f81eae5c0f8f3e148bda34a62ebdf231f32ce11e5

  • SSDEEP

    49152:J8pDHHmxndoP0j1hMHB3iA0+aIoYz6R0X:J8NmJEdHAAlXoJi

Score
10/10
xmrigminer

Malware Config

Targets

    • Target

      258c424258da02b0ee7e091b0fc689de0977b7d79e386094c593401222a98540

    • Size

      1.6MB

    • MD5

      a1ab8ca7cee41564cde313f0d947166a

    • SHA1

      bfbb4e15365aaac6a79260467f261405af20c27f

    • SHA256

      258c424258da02b0ee7e091b0fc689de0977b7d79e386094c593401222a98540

    • SHA512

      f45f078a0a8062ceb6e58d640c02cce7a279ee5ca38698a9f90f76f8873dd68e29041437e930c2c14fb0c91f81eae5c0f8f3e148bda34a62ebdf231f32ce11e5

    • SSDEEP

      49152:J8pDHHmxndoP0j1hMHB3iA0+aIoYz6R0X:J8NmJEdHAAlXoJi

    Score
    10/10
    xmrigminer

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks