Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ca0fb4ff5d033c788466c712696f11075613324bac927dc1d3fe7c05c1db4b25

  • Size

    559KB

  • Sample

    230422-287f8ahd23

  • MD5

    146d62fd3b108c463c88b8c9a31fdafc

  • SHA1

    26f054bf59f7bbb20f5280107abcc51144c0ee56

  • SHA256

    ca0fb4ff5d033c788466c712696f11075613324bac927dc1d3fe7c05c1db4b25

  • SHA512

    bb9e6aae4eb29002923df97a429d6b208b64b6909a15df5b3465ce47fed4c07d7ac59f36ede8b6f3ada7899b13101cd46dbe18d97ba813bafc1913c7dec21a29

  • SSDEEP

    12288:vy90Rxf+wGh2gwnnmOr6uRXEcc/mFK6xwqdy:vyDwuInm1uRU0/Hy

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      ca0fb4ff5d033c788466c712696f11075613324bac927dc1d3fe7c05c1db4b25

    • Size

      559KB

    • MD5

      146d62fd3b108c463c88b8c9a31fdafc

    • SHA1

      26f054bf59f7bbb20f5280107abcc51144c0ee56

    • SHA256

      ca0fb4ff5d033c788466c712696f11075613324bac927dc1d3fe7c05c1db4b25

    • SHA512

      bb9e6aae4eb29002923df97a429d6b208b64b6909a15df5b3465ce47fed4c07d7ac59f36ede8b6f3ada7899b13101cd46dbe18d97ba813bafc1913c7dec21a29

    • SSDEEP

      12288:vy90Rxf+wGh2gwnnmOr6uRXEcc/mFK6xwqdy:vyDwuInm1uRU0/Hy

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks