Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1662e97a2747276b2960580bd9bd80e4487da46d91ec8dfb953fe796887b93b9

  • Size

    697KB

  • Sample

    230422-2esqzahb27

  • MD5

    e6af40ccf3657c433565e7ba5265cf1b

  • SHA1

    c1170557ce5c0319bc514526e41af41fced70a25

  • SHA256

    1662e97a2747276b2960580bd9bd80e4487da46d91ec8dfb953fe796887b93b9

  • SHA512

    ff9f8c96cd1c77e33c11cb27a4e11a5e6d018296148ccba6a2fceb6470ffe7ddc735632c0c6aaf8e95bddb572f270320eb2a42dac6e17706d6a5a6f7b29c539a

  • SSDEEP

    12288:ry90sv9x1ziSSTkCkvUGe6OlV/JxzgR/rwiNq7EuYVEcYLmWOjJBMf:rylVx1z2Tkwn3xxAFuYqYMf

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      1662e97a2747276b2960580bd9bd80e4487da46d91ec8dfb953fe796887b93b9

    • Size

      697KB

    • MD5

      e6af40ccf3657c433565e7ba5265cf1b

    • SHA1

      c1170557ce5c0319bc514526e41af41fced70a25

    • SHA256

      1662e97a2747276b2960580bd9bd80e4487da46d91ec8dfb953fe796887b93b9

    • SHA512

      ff9f8c96cd1c77e33c11cb27a4e11a5e6d018296148ccba6a2fceb6470ffe7ddc735632c0c6aaf8e95bddb572f270320eb2a42dac6e17706d6a5a6f7b29c539a

    • SSDEEP

      12288:ry90sv9x1ziSSTkCkvUGe6OlV/JxzgR/rwiNq7EuYVEcYLmWOjJBMf:rylVx1z2Tkwn3xxAFuYqYMf

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks