Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9d25c9be5687bfd019b9d8d582b5d9952d179499792fd48e3b335e210fb7e664

  • Size

    841KB

  • Sample

    230418-a35lwsgg99

  • MD5

    dd31ff790257ce768af5f310ad3393f1

  • SHA1

    f1ea0dcd262ed148a9d2df478f2669d90076e5a0

  • SHA256

    9d25c9be5687bfd019b9d8d582b5d9952d179499792fd48e3b335e210fb7e664

  • SHA512

    98cdd56a07591c1131cb552a2ceb84e617a037d1b44d71ccd6e9e9a615250d47b1bc36e1807c64d9389dc1d32086456e4ae29fb61dad291fac99059261c4ad57

  • SSDEEP

    12288:Zy90AkBVwTo/A96oYAShW0g9RG2Q25fb3woj/7HV3iSJJWhu7gm97WRllqQlZOL8:Zyypo95YAE1g9RG2ftgY4SJJW9DI6MI

Score
10/10
amadeydiscoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      9d25c9be5687bfd019b9d8d582b5d9952d179499792fd48e3b335e210fb7e664

    • Size

      841KB

    • MD5

      dd31ff790257ce768af5f310ad3393f1

    • SHA1

      f1ea0dcd262ed148a9d2df478f2669d90076e5a0

    • SHA256

      9d25c9be5687bfd019b9d8d582b5d9952d179499792fd48e3b335e210fb7e664

    • SHA512

      98cdd56a07591c1131cb552a2ceb84e617a037d1b44d71ccd6e9e9a615250d47b1bc36e1807c64d9389dc1d32086456e4ae29fb61dad291fac99059261c4ad57

    • SSDEEP

      12288:Zy90AkBVwTo/A96oYAShW0g9RG2Q25fb3woj/7HV3iSJJWhu7gm97WRllqQlZOL8:Zyypo95YAE1g9RG2ftgY4SJJW9DI6MI

    Score
    10/10
    amadeydiscoveryevasionpersistencespywarestealertrojan

    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

      trojanamadey

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks