Overview

overview

7

Static

static

1

dridex

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    1f2a655fcde1d05e5005056fac1719a695fefc0529c24831cd5c9fdd1ac3dde8

  • Size

    144KB

  • Sample

    230330-hmmedacg8v

  • MD5

    2dd1596f1e5b787aaababc3751708dd8

  • SHA1

    678846371b34b7fdf4981df90c3fff70bf785044

  • SHA256

    1f2a655fcde1d05e5005056fac1719a695fefc0529c24831cd5c9fdd1ac3dde8

  • SHA512

    35f52adeedf514dd88fa4aff8ce4c3dcb0243aec4ddf13dc3fcfd6112ff99089ca5f23379ed6525221f60d7c023aaf7c9c15f0794e2365b3fda710e670910ca6

  • SSDEEP

    1536:BhJERrJlro4AQCpodJdxQZejQQccHjPIkSPw6QvjTly0l2Km/bKpLlrtvSsgkU+b:BhQAtWwAjTly07m/upLVtT6Adgzc

Score
7/10
collectionpersistencespywarestealer

Malware Config

Targets

    • Target

      1f2a655fcde1d05e5005056fac1719a695fefc0529c24831cd5c9fdd1ac3dde8

    • Size

      144KB

    • MD5

      2dd1596f1e5b787aaababc3751708dd8

    • SHA1

      678846371b34b7fdf4981df90c3fff70bf785044

    • SHA256

      1f2a655fcde1d05e5005056fac1719a695fefc0529c24831cd5c9fdd1ac3dde8

    • SHA512

      35f52adeedf514dd88fa4aff8ce4c3dcb0243aec4ddf13dc3fcfd6112ff99089ca5f23379ed6525221f60d7c023aaf7c9c15f0794e2365b3fda710e670910ca6

    • SSDEEP

      1536:BhJERrJlro4AQCpodJdxQZejQQccHjPIkSPw6QvjTly0l2Km/bKpLlrtvSsgkU+b:BhQAtWwAjTly07m/upLVtT6Adgzc

    Score
    7/10
    collectionpersistencespywarestealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook profiles

      collection

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks