Overview

overview

9

Static

static

7

dridex

windows10-1703-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fefaee6a4c81c7aed92e53d78a136257a598ca381aa924eb7de77ee167a14028

  • Size

    7.2MB

  • Sample

    230316-jvg1ascb4v

  • MD5

    57e2845eb05f73776bf9ad4fdd1ee951

  • SHA1

    b1bd4a77ba91d7b4a0135efaa7ed697f78ad71dd

  • SHA256

    fefaee6a4c81c7aed92e53d78a136257a598ca381aa924eb7de77ee167a14028

  • SHA512

    89c1374883b13ffeb81b03a4524e84880a9254eac5545c14ae810543c1dfe89559724b67c67e49e0795596e76534bc6e40f6a4f733f2ca3a0c9b57cbc271bfcb

  • SSDEEP

    196608:ouEVJyJl5mVTdVnQQQlLULh3otPN/x1UT++WTho:ofn2faTn6lu2H1K++WT+

Score
9/10
evasionthemidatrojan

Malware Config

Targets

    • Target

      fefaee6a4c81c7aed92e53d78a136257a598ca381aa924eb7de77ee167a14028

    • Size

      7.2MB

    • MD5

      57e2845eb05f73776bf9ad4fdd1ee951

    • SHA1

      b1bd4a77ba91d7b4a0135efaa7ed697f78ad71dd

    • SHA256

      fefaee6a4c81c7aed92e53d78a136257a598ca381aa924eb7de77ee167a14028

    • SHA512

      89c1374883b13ffeb81b03a4524e84880a9254eac5545c14ae810543c1dfe89559724b67c67e49e0795596e76534bc6e40f6a4f733f2ca3a0c9b57cbc271bfcb

    • SSDEEP

      196608:ouEVJyJl5mVTdVnQQQlLULh3otPN/x1UT++WTho:ofn2faTn6lu2H1K++WT+

    Score
    9/10
    evasionthemidatrojan

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Checks whether UAC is enabled

      evasiontrojan

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks