Overview

overview

9

Static

static

1

dridex

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    445a3a155b6d4e73e2bb2662c28bfb29093563b90d8322cf459838f88b404102

  • Size

    3.4MB

  • Sample

    230313-arrwnaaa4y

  • MD5

    fda332fda773ed70ebbe56f806257e2f

  • SHA1

    249a3fcdd4fabb5e1dd420cc514d219be83768d7

  • SHA256

    445a3a155b6d4e73e2bb2662c28bfb29093563b90d8322cf459838f88b404102

  • SHA512

    0e1b617f65aab724fc27436157648ce17c799ffa6e6da0525f85c0599625c15cbb49280074d37f40a65a4ced44a89c389038acbd35ce16bd0faae68f05bf1827

  • SSDEEP

    98304:jlaEU6/HWQ4noYOCtapQX9ejqcT3/SgYf:jwEH/QotQGrT3K

Score
9/10
discoveryevasiontrojanupx

Malware Config

Targets

    • Target

      445a3a155b6d4e73e2bb2662c28bfb29093563b90d8322cf459838f88b404102

    • Size

      3.4MB

    • MD5

      fda332fda773ed70ebbe56f806257e2f

    • SHA1

      249a3fcdd4fabb5e1dd420cc514d219be83768d7

    • SHA256

      445a3a155b6d4e73e2bb2662c28bfb29093563b90d8322cf459838f88b404102

    • SHA512

      0e1b617f65aab724fc27436157648ce17c799ffa6e6da0525f85c0599625c15cbb49280074d37f40a65a4ced44a89c389038acbd35ce16bd0faae68f05bf1827

    • SSDEEP

      98304:jlaEU6/HWQ4noYOCtapQX9ejqcT3/SgYf:jwEH/QotQGrT3K

    Score
    9/10
    discoveryevasiontrojanupx

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Executes dropped EXE

    • Modifies file permissions

      discovery

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks whether UAC is enabled

      evasiontrojan

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks