Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    873d980aad254e5a6c8834ecaf8f86f2e16e304ca4694dd834091449aab72293

  • Size

    1.1MB

  • Sample

    230420-scmmhace6v

  • MD5

    9a1825d61ac5282d57733891d4899a70

  • SHA1

    f51a9a0e3df977ff3efb83ae24e9b9c9ab34b969

  • SHA256

    873d980aad254e5a6c8834ecaf8f86f2e16e304ca4694dd834091449aab72293

  • SHA512

    3cdc089e02bdc500628b567528311f38d4ce0b74bb09e1f03805d676f4b54332bacfd80eac43e294b12ee2b4972b4bacb257065853384b42531a4f05b379ec91

  • SSDEEP

    24576:Py4aB9FWZbbJ2NX/2aL2FLYP3T+eCfyUf9:a489FvRcLYr+5Ka

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      873d980aad254e5a6c8834ecaf8f86f2e16e304ca4694dd834091449aab72293

    • Size

      1.1MB

    • MD5

      9a1825d61ac5282d57733891d4899a70

    • SHA1

      f51a9a0e3df977ff3efb83ae24e9b9c9ab34b969

    • SHA256

      873d980aad254e5a6c8834ecaf8f86f2e16e304ca4694dd834091449aab72293

    • SHA512

      3cdc089e02bdc500628b567528311f38d4ce0b74bb09e1f03805d676f4b54332bacfd80eac43e294b12ee2b4972b4bacb257065853384b42531a4f05b379ec91

    • SSDEEP

      24576:Py4aB9FWZbbJ2NX/2aL2FLYP3T+eCfyUf9:a489FvRcLYr+5Ka

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks