Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e0cbf370d8c2162c2aa67f4a5624f244d074bd56538436ceeb269c87479d7a0b

  • Size

    4.1MB

  • Sample

    230216-xw4scaah9z

  • MD5

    2fd96c538a29e2d37c17e02b32f084d6

  • SHA1

    b10f2cef3ef1cc9bea963f30fb776d5264eb08df

  • SHA256

    e0cbf370d8c2162c2aa67f4a5624f244d074bd56538436ceeb269c87479d7a0b

  • SHA512

    6f17e076ef755ff78ae3905e38c1f03e79a954f4d0d6c8a97e4df212f7b1226835ccdd1d46c675b6e1eb984452153205760551fa24a4a24a189938370aac60cb

  • SSDEEP

    98304:JSqZc3lG6PQ9g3Nu8oHz3oTQ4flENBQZlQ/TqYNZXHo:Q8wwpos4tI+l2eYNZY

Score
10/10
gluptebadiscoverydropperevasionloaderpersistencetrojan

Malware Config

Targets

    • Target

      e0cbf370d8c2162c2aa67f4a5624f244d074bd56538436ceeb269c87479d7a0b

    • Size

      4.1MB

    • MD5

      2fd96c538a29e2d37c17e02b32f084d6

    • SHA1

      b10f2cef3ef1cc9bea963f30fb776d5264eb08df

    • SHA256

      e0cbf370d8c2162c2aa67f4a5624f244d074bd56538436ceeb269c87479d7a0b

    • SHA512

      6f17e076ef755ff78ae3905e38c1f03e79a954f4d0d6c8a97e4df212f7b1226835ccdd1d46c675b6e1eb984452153205760551fa24a4a24a189938370aac60cb

    • SSDEEP

      98304:JSqZc3lG6PQ9g3Nu8oHz3oTQ4flENBQZlQ/TqYNZXHo:Q8wwpos4tI+l2eYNZY

    Score
    10/10
    gluptebadiscoverydropperevasionloaderpersistencetrojan

    • Glupteba

      Glupteba is a modular loader written in Golang with various components.

      loaderdropperglupteba

    • Windows security bypass

      evasiontrojan

    • Modifies Windows Firewall

      evasion

    • Executes dropped EXE

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks