Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    497d4adeda459bfb9421e89e3d9b7ef355d68faa81b1f7bc4f5c4f8b88c7d75b

  • Size

    558KB

  • Sample

    230421-2b258scc8y

  • MD5

    fc61d53f4999477b007aaa6f18adb688

  • SHA1

    bf2d18ba4ca287dc05c94a4a0f4d67a9e89d1162

  • SHA256

    497d4adeda459bfb9421e89e3d9b7ef355d68faa81b1f7bc4f5c4f8b88c7d75b

  • SHA512

    8fd6f141dc381fa0156e2a47cd4121c3ff008aa108a0f1bca340cf99f9d5966b3c6339c9df098a5c2506452f93adab71c0ca7536f20200ce1e7a0bc63b9135c2

  • SSDEEP

    12288:Ky90Y11qeoY1iZQA3Lt10GmM7CrDOnaixeRRmkGRt+:KyH1Mej1i1Lt10R6dImk+t+

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      497d4adeda459bfb9421e89e3d9b7ef355d68faa81b1f7bc4f5c4f8b88c7d75b

    • Size

      558KB

    • MD5

      fc61d53f4999477b007aaa6f18adb688

    • SHA1

      bf2d18ba4ca287dc05c94a4a0f4d67a9e89d1162

    • SHA256

      497d4adeda459bfb9421e89e3d9b7ef355d68faa81b1f7bc4f5c4f8b88c7d75b

    • SHA512

      8fd6f141dc381fa0156e2a47cd4121c3ff008aa108a0f1bca340cf99f9d5966b3c6339c9df098a5c2506452f93adab71c0ca7536f20200ce1e7a0bc63b9135c2

    • SSDEEP

      12288:Ky90Y11qeoY1iZQA3Lt10GmM7CrDOnaixeRRmkGRt+:KyH1Mej1i1Lt10R6dImk+t+

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks