Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    71158b38a33d1d8a245fb87b34c4bc308ae4f4677e27d9653fce877af52b04eb

  • Size

    694KB

  • Sample

    230421-141bnscb71

  • MD5

    db0a3ab1ecc9016cd406d8ee8d500739

  • SHA1

    aca142d0ee07098cea6f1a525a9ce3e683861a8b

  • SHA256

    71158b38a33d1d8a245fb87b34c4bc308ae4f4677e27d9653fce877af52b04eb

  • SHA512

    3f3ad90a85d52977728f0600158af2da3994af422fbb9c76e2eff5e33455544fc26af09fe6a9c93fb64eb3d4c0b68c22e9f1d2c606d3ff75f77ae573e2e080fe

  • SSDEEP

    12288:ay90cmp1cgFePaUeWbEJWa83oMRmNmQT7DllaMxUB5zhZi9SY:ayocSWaUeWbvzoMkNJJXWRY

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      71158b38a33d1d8a245fb87b34c4bc308ae4f4677e27d9653fce877af52b04eb

    • Size

      694KB

    • MD5

      db0a3ab1ecc9016cd406d8ee8d500739

    • SHA1

      aca142d0ee07098cea6f1a525a9ce3e683861a8b

    • SHA256

      71158b38a33d1d8a245fb87b34c4bc308ae4f4677e27d9653fce877af52b04eb

    • SHA512

      3f3ad90a85d52977728f0600158af2da3994af422fbb9c76e2eff5e33455544fc26af09fe6a9c93fb64eb3d4c0b68c22e9f1d2c606d3ff75f77ae573e2e080fe

    • SSDEEP

      12288:ay90cmp1cgFePaUeWbEJWa83oMRmNmQT7DllaMxUB5zhZi9SY:ayocSWaUeWbvzoMkNJJXWRY

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks