Overview

overview

7

Static

static

1

dridex

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2e53a6710f04dd84cfd3ac1874a2a61e690568405f192e7cbf8a4df12da334c4

  • Size

    111KB

  • Sample

    230221-n1cd8age6z

  • MD5

    5b45640a3bd4fdc32df75aa462f5a167

  • SHA1

    fdc2b61ca7b5c31ba48155d364b8797990e2eaee

  • SHA256

    2e53a6710f04dd84cfd3ac1874a2a61e690568405f192e7cbf8a4df12da334c4

  • SHA512

    3f3e86e14f0a09bafd374da2417452bc69741e14c2d4e1a4b208a94e1a2c9cd3a0c4336ec23e9b046bcad051aac8d6f05d4477cb516c3700b27f21e023106963

  • SSDEEP

    3072:lb4MOYUuQaS+T8sv8X31OjqOjNhOYRbxqH8QW2zCrAZuRs5:wYUuQaS+T8sv8X31OXN1bgl

Score
7/10

Malware Config

Targets

    • Target

      2e53a6710f04dd84cfd3ac1874a2a61e690568405f192e7cbf8a4df12da334c4

    • Size

      111KB

    • MD5

      5b45640a3bd4fdc32df75aa462f5a167

    • SHA1

      fdc2b61ca7b5c31ba48155d364b8797990e2eaee

    • SHA256

      2e53a6710f04dd84cfd3ac1874a2a61e690568405f192e7cbf8a4df12da334c4

    • SHA512

      3f3e86e14f0a09bafd374da2417452bc69741e14c2d4e1a4b208a94e1a2c9cd3a0c4336ec23e9b046bcad051aac8d6f05d4477cb516c3700b27f21e023106963

    • SSDEEP

      3072:lb4MOYUuQaS+T8sv8X31OjqOjNhOYRbxqH8QW2zCrAZuRs5:wYUuQaS+T8sv8X31OXN1bgl

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Process Discovery

1
T1057

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks