Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    290da00ab96d4c88bfdbec551b224e3a3d3a9e40060eddce6cc8759189bc1ded

  • Size

    1.4MB

  • Sample

    230320-svjcsseb56

  • MD5

    2e5bc1f6ab5cd7c84c6ea49877e67362

  • SHA1

    89554667ece871f736364fbf99042f6e77a11582

  • SHA256

    290da00ab96d4c88bfdbec551b224e3a3d3a9e40060eddce6cc8759189bc1ded

  • SHA512

    250d91e1ce4c56cd48c45ca6c867670d323a0d589d55950ded6a6de1b22fd3d4a2b1b9f93f38819c7abf334b57387c4343b8605182758c69ea89d9a6cf30d5ff

  • SSDEEP

    24576:ShAmRh7we9mr06DvDRRSo62tHbt4yM0y6ocrgisd5jOOYKtWvnGGamdn:/m5QxGovtyvGo/iszORbGGh

Score
10/10
xmrigminer

Malware Config

Targets

    • Target

      290da00ab96d4c88bfdbec551b224e3a3d3a9e40060eddce6cc8759189bc1ded

    • Size

      1.4MB

    • MD5

      2e5bc1f6ab5cd7c84c6ea49877e67362

    • SHA1

      89554667ece871f736364fbf99042f6e77a11582

    • SHA256

      290da00ab96d4c88bfdbec551b224e3a3d3a9e40060eddce6cc8759189bc1ded

    • SHA512

      250d91e1ce4c56cd48c45ca6c867670d323a0d589d55950ded6a6de1b22fd3d4a2b1b9f93f38819c7abf334b57387c4343b8605182758c69ea89d9a6cf30d5ff

    • SSDEEP

      24576:ShAmRh7we9mr06DvDRRSo62tHbt4yM0y6ocrgisd5jOOYKtWvnGGamdn:/m5QxGovtyvGo/iszORbGGh

    Score
    10/10
    xmrigminer

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks