Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e816a858352979dd4a0b6745ab64b988585dc3b5aff8bf86e2ffef3b8763cc3e

  • Size

    965KB

  • Sample

    230422-ac2gjsch5s

  • MD5

    3670e664c78745aa6febfbbdd2f7ba88

  • SHA1

    13671c550b25f471d673e1e034f0bffef0d51ebf

  • SHA256

    e816a858352979dd4a0b6745ab64b988585dc3b5aff8bf86e2ffef3b8763cc3e

  • SHA512

    2eec9d678cb4a881aeed662565cd475d6c8cccd69acd8f220e0dbb456f4a5537eeaf1080da72b4cdb1990af5e6fcf2943f1559316886c3369d6b2af50cb215aa

  • SSDEEP

    12288:Cy90YdsYvyFqFvvrRt8KQehJsbe9p/AhniBBf4grgGU+OdOSE/X5qUHtT6xdvqP7:CyYYqonrz8LI6s7lU+2+PHx6xqIw19

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      e816a858352979dd4a0b6745ab64b988585dc3b5aff8bf86e2ffef3b8763cc3e

    • Size

      965KB

    • MD5

      3670e664c78745aa6febfbbdd2f7ba88

    • SHA1

      13671c550b25f471d673e1e034f0bffef0d51ebf

    • SHA256

      e816a858352979dd4a0b6745ab64b988585dc3b5aff8bf86e2ffef3b8763cc3e

    • SHA512

      2eec9d678cb4a881aeed662565cd475d6c8cccd69acd8f220e0dbb456f4a5537eeaf1080da72b4cdb1990af5e6fcf2943f1559316886c3369d6b2af50cb215aa

    • SSDEEP

      12288:Cy90YdsYvyFqFvvrRt8KQehJsbe9p/AhniBBf4grgGU+OdOSE/X5qUHtT6xdvqP7:CyYYqonrz8LI6s7lU+2+PHx6xqIw19

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks