Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7a33a3ccfe1a0f5d485adf69de271c355a2dee8bb1246f4eeefc49ca59d481c0

  • Size

    827KB

  • Sample

    230420-bhjdlaee45

  • MD5

    39013e4d119c2f804c2cf536df955770

  • SHA1

    75b96eba8931d457768b724606883213a10bc83d

  • SHA256

    7a33a3ccfe1a0f5d485adf69de271c355a2dee8bb1246f4eeefc49ca59d481c0

  • SHA512

    90734763919363bf8258f6f7cd33202b7a875c3aa8d5efbc2f48960ab6400ba427351275121f9e55fdb02c5e0382055ba63d0851c84ee7c14735c9f147fc039c

  • SSDEEP

    12288:/y90hUYWL5z0PgkeD7RoGauc+oJfx2RTek8FqLXInQ8vFX7aHdLQL6DEcMd3asWi:/ymUz08GyMv7YXIZm9L9E1WWXA6

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      7a33a3ccfe1a0f5d485adf69de271c355a2dee8bb1246f4eeefc49ca59d481c0

    • Size

      827KB

    • MD5

      39013e4d119c2f804c2cf536df955770

    • SHA1

      75b96eba8931d457768b724606883213a10bc83d

    • SHA256

      7a33a3ccfe1a0f5d485adf69de271c355a2dee8bb1246f4eeefc49ca59d481c0

    • SHA512

      90734763919363bf8258f6f7cd33202b7a875c3aa8d5efbc2f48960ab6400ba427351275121f9e55fdb02c5e0382055ba63d0851c84ee7c14735c9f147fc039c

    • SSDEEP

      12288:/y90hUYWL5z0PgkeD7RoGauc+oJfx2RTek8FqLXInQ8vFX7aHdLQL6DEcMd3asWi:/ymUz08GyMv7YXIZm9L9E1WWXA6

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks