Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f583d4d4d6d69ce851b40ed8e5614c6294cf410b771b8f686523b2937df9579c

  • Size

    842KB

  • Sample

    230417-jqthjadd95

  • MD5

    96a065145bad363dd0a02d3b3e0a151d

  • SHA1

    79c0602173fa9c183bbb44eaf025438f41ab3a4a

  • SHA256

    f583d4d4d6d69ce851b40ed8e5614c6294cf410b771b8f686523b2937df9579c

  • SHA512

    2378fe31ad8ab9a3214f1f5967188ab0d00d344b40bf77dde3faada51b4ae62b50f8d86a159dcec472ce97ac897edfdac745c50490cfa0b803991821b4b2c4fc

  • SSDEEP

    12288:Ay90HfqCk6VZHZCMzTY0vfjpAYIlkAsUI7YlgJN4u/gBR6cJH8YUdY6eLZl60z3f:Ayef3kA5TDfjuYIiAC7Yj0u8IprE58

Score
10/10
amadeydiscoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      f583d4d4d6d69ce851b40ed8e5614c6294cf410b771b8f686523b2937df9579c

    • Size

      842KB

    • MD5

      96a065145bad363dd0a02d3b3e0a151d

    • SHA1

      79c0602173fa9c183bbb44eaf025438f41ab3a4a

    • SHA256

      f583d4d4d6d69ce851b40ed8e5614c6294cf410b771b8f686523b2937df9579c

    • SHA512

      2378fe31ad8ab9a3214f1f5967188ab0d00d344b40bf77dde3faada51b4ae62b50f8d86a159dcec472ce97ac897edfdac745c50490cfa0b803991821b4b2c4fc

    • SSDEEP

      12288:Ay90HfqCk6VZHZCMzTY0vfjpAYIlkAsUI7YlgJN4u/gBR6cJH8YUdY6eLZl60z3f:Ayef3kA5TDfjuYIiAC7Yj0u8IprE58

    Score
    10/10
    amadeydiscoveryevasionpersistencespywarestealertrojan

    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

      trojanamadey

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks