Overview

overview

8

Static

static

1

dridex

windows10-1703-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    30ab12bc357cf9231b5892730da1b12a1c956f9eafa69613a544f82062b3966c

  • Size

    3.6MB

  • Sample

    230214-ybgyhsfg37

  • MD5

    39d4c2e1718b87e1de55a62bace2fc1c

  • SHA1

    e987ebaec21d4f383fde1dfca91011b4af5bd81c

  • SHA256

    30ab12bc357cf9231b5892730da1b12a1c956f9eafa69613a544f82062b3966c

  • SHA512

    58d7d0f4f77971bf2e0e79cf1745907a8d9f4ee30fef95cbdc35365305c98eff4e852826158891950710445c90f3532e0d37f0173f5ee96431c36925d2e876fd

  • SSDEEP

    49152:mW0fgB6ujezVwbxcCrQf5oLJbOzD9TXwONDraXpHvg48yXj2JPPsIg9n2JXxtYK6:mW0o6uizSbKCaCMgOEpY4ZaHggZLL+

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      30ab12bc357cf9231b5892730da1b12a1c956f9eafa69613a544f82062b3966c

    • Size

      3.6MB

    • MD5

      39d4c2e1718b87e1de55a62bace2fc1c

    • SHA1

      e987ebaec21d4f383fde1dfca91011b4af5bd81c

    • SHA256

      30ab12bc357cf9231b5892730da1b12a1c956f9eafa69613a544f82062b3966c

    • SHA512

      58d7d0f4f77971bf2e0e79cf1745907a8d9f4ee30fef95cbdc35365305c98eff4e852826158891950710445c90f3532e0d37f0173f5ee96431c36925d2e876fd

    • SSDEEP

      49152:mW0fgB6ujezVwbxcCrQf5oLJbOzD9TXwONDraXpHvg48yXj2JPPsIg9n2JXxtYK6:mW0o6uizSbKCaCMgOEpY4ZaHggZLL+

    Score
    8/10
    discoverypersistence

    • Blocklisted process makes network request

    • Sets DLL path for service in the registry

      persistence

    • Sets service image path in registry

      persistence

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks