Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bf3bf2b2ee57598a0af661390c57eab86d26833f26c33019ac34bbe200639244

  • Size

    978KB

  • Sample

    230418-fqf1nabd6x

  • MD5

    8192ccd40c73efb869f437990f6c4430

  • SHA1

    02a0ef1930d570bb810f71a847301f13407ed2a5

  • SHA256

    bf3bf2b2ee57598a0af661390c57eab86d26833f26c33019ac34bbe200639244

  • SHA512

    703a428b7db8657a4d9a417ed33e94bdb8f1076b78338285879532c31fb829fe0b8b9a5d29161389279e9a86038892be0ecf2356312107d5ce3d84e1235dd538

  • SSDEEP

    24576:xyQsoYEoZ20NzqorHy/hPJO8wb9ojsiu:kQsoYrlzZy/hPJF4

Score
10/10
amadeydiscoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      bf3bf2b2ee57598a0af661390c57eab86d26833f26c33019ac34bbe200639244

    • Size

      978KB

    • MD5

      8192ccd40c73efb869f437990f6c4430

    • SHA1

      02a0ef1930d570bb810f71a847301f13407ed2a5

    • SHA256

      bf3bf2b2ee57598a0af661390c57eab86d26833f26c33019ac34bbe200639244

    • SHA512

      703a428b7db8657a4d9a417ed33e94bdb8f1076b78338285879532c31fb829fe0b8b9a5d29161389279e9a86038892be0ecf2356312107d5ce3d84e1235dd538

    • SSDEEP

      24576:xyQsoYEoZ20NzqorHy/hPJO8wb9ojsiu:kQsoYrlzZy/hPJF4

    Score
    10/10
    amadeydiscoveryevasionpersistencespywarestealertrojan

    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

      trojanamadey

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks