Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eb39ba213c4cb0675de064d9d9f227acea0b72c577b3080da10d10b1a392eb79

  • Size

    1.1MB

  • Sample

    230420-r11nlaae35

  • MD5

    59a886310f4f04a8a16823a44ae312b8

  • SHA1

    a1cd16e2a73bfb012f362b54646290baa0b45433

  • SHA256

    eb39ba213c4cb0675de064d9d9f227acea0b72c577b3080da10d10b1a392eb79

  • SHA512

    abb8417ab077669cccbdab6b80501364badda045e2131f391789c3a5b95ee324ea087a2c58f5edebc4d6911e85259a8cc99f29cf43462d4556ba10aaa4148738

  • SSDEEP

    24576:vyxs2JzUOdpymHriVBG3cZeWC/03bCEoodlIRivbnNDlBQ:6xs2lDdpLHriDZdC+bCEFl8ivbnNDlB

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      eb39ba213c4cb0675de064d9d9f227acea0b72c577b3080da10d10b1a392eb79

    • Size

      1.1MB

    • MD5

      59a886310f4f04a8a16823a44ae312b8

    • SHA1

      a1cd16e2a73bfb012f362b54646290baa0b45433

    • SHA256

      eb39ba213c4cb0675de064d9d9f227acea0b72c577b3080da10d10b1a392eb79

    • SHA512

      abb8417ab077669cccbdab6b80501364badda045e2131f391789c3a5b95ee324ea087a2c58f5edebc4d6911e85259a8cc99f29cf43462d4556ba10aaa4148738

    • SSDEEP

      24576:vyxs2JzUOdpymHriVBG3cZeWC/03bCEoodlIRivbnNDlBQ:6xs2lDdpLHriDZdC+bCEFl8ivbnNDlB

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks