Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6979da2bb18e014dd847a5e35aaeac328193d1843c6e834ed63e5b8785e9b80c

  • Size

    1.4MB

  • Sample

    230320-1ctptahd7z

  • MD5

    e4f87a460e69c82d2e6c77814e36e729

  • SHA1

    e587afad6859aaf144266ec80c837c396f06e8b5

  • SHA256

    6979da2bb18e014dd847a5e35aaeac328193d1843c6e834ed63e5b8785e9b80c

  • SHA512

    827f92cff4256bc624feb302b15da7da4b5b17aa68948fd8e2b462eee9734562fa8c7630ca907bb88e8e270f3bc870b27f0ce7dd412fd88451663c7ad9ef30d2

  • SSDEEP

    24576:DhAmRh7we9mr06DvDRRSo62tHbt4yM0y6ocrgisd5jOOYKtWvnGGamd0:Gm5QxGovtyvGo/iszORbGGC

Score
10/10
xmrigminer

Malware Config

Targets

    • Target

      6979da2bb18e014dd847a5e35aaeac328193d1843c6e834ed63e5b8785e9b80c

    • Size

      1.4MB

    • MD5

      e4f87a460e69c82d2e6c77814e36e729

    • SHA1

      e587afad6859aaf144266ec80c837c396f06e8b5

    • SHA256

      6979da2bb18e014dd847a5e35aaeac328193d1843c6e834ed63e5b8785e9b80c

    • SHA512

      827f92cff4256bc624feb302b15da7da4b5b17aa68948fd8e2b462eee9734562fa8c7630ca907bb88e8e270f3bc870b27f0ce7dd412fd88451663c7ad9ef30d2

    • SSDEEP

      24576:DhAmRh7we9mr06DvDRRSo62tHbt4yM0y6ocrgisd5jOOYKtWvnGGamd0:Gm5QxGovtyvGo/iszORbGGC

    Score
    10/10
    xmrigminer

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks