Overview

overview

7

Static

static

7

dridex

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e3c0bad9d7f56d6b9e6bbb77359e88553fa8f42430ceeb4cfa554196b3906cb3

  • Size

    277KB

  • Sample

    230328-crtrcsac9y

  • MD5

    82f057dc4b1e4d366b5e22c7899de32a

  • SHA1

    a5792f25c404d39ded632ba576b1931bcf8d88c8

  • SHA256

    e3c0bad9d7f56d6b9e6bbb77359e88553fa8f42430ceeb4cfa554196b3906cb3

  • SHA512

    66003505c906f91ee0e3a6f8eb6c00b18fb8186e2723476da35c37fe640ed7de38c576802d138845730a82bc09d8e0f8cfdc29d91c967da1cde2df9e5f03d91c

  • SSDEEP

    6144:eXzKdNY49u8rVm1TZtF/gkq+IyMePO01netF:la4Ar1/gkqryM501e

Score
7/10
upx

Malware Config

Targets

    • Target

      e3c0bad9d7f56d6b9e6bbb77359e88553fa8f42430ceeb4cfa554196b3906cb3

    • Size

      277KB

    • MD5

      82f057dc4b1e4d366b5e22c7899de32a

    • SHA1

      a5792f25c404d39ded632ba576b1931bcf8d88c8

    • SHA256

      e3c0bad9d7f56d6b9e6bbb77359e88553fa8f42430ceeb4cfa554196b3906cb3

    • SHA512

      66003505c906f91ee0e3a6f8eb6c00b18fb8186e2723476da35c37fe640ed7de38c576802d138845730a82bc09d8e0f8cfdc29d91c967da1cde2df9e5f03d91c

    • SSDEEP

      6144:eXzKdNY49u8rVm1TZtF/gkq+IyMePO01netF:la4Ar1/gkqryM501e

    Score
    7/10
    upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks