Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3ca61203ee96fb5bdbf11e1d2a1d4660eee67e97382899b9e27bf61df34ca49d

  • Size

    568KB

  • Sample

    230422-aq91vada21

  • MD5

    1aa9de7245bfba0572f5ae6088b9e2a4

  • SHA1

    ab273fcefb873ef4fecba7e7a9510abd9c5a11ad

  • SHA256

    3ca61203ee96fb5bdbf11e1d2a1d4660eee67e97382899b9e27bf61df34ca49d

  • SHA512

    8c9c4199c690641b7fb8939a656926f30223b97965d7334c26b052d4ed8c5bfbae1605b4075b21423fe8acf8a24af831091a8899dc5f94a4ee9638f2ed56c51e

  • SSDEEP

    12288:jy90hFLRlUzwdnEAGuOuc9x8BNrqiaBOS+vZ2ACkIsKtGQB:jyul8wKuLraBxI9CxtG4

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      3ca61203ee96fb5bdbf11e1d2a1d4660eee67e97382899b9e27bf61df34ca49d

    • Size

      568KB

    • MD5

      1aa9de7245bfba0572f5ae6088b9e2a4

    • SHA1

      ab273fcefb873ef4fecba7e7a9510abd9c5a11ad

    • SHA256

      3ca61203ee96fb5bdbf11e1d2a1d4660eee67e97382899b9e27bf61df34ca49d

    • SHA512

      8c9c4199c690641b7fb8939a656926f30223b97965d7334c26b052d4ed8c5bfbae1605b4075b21423fe8acf8a24af831091a8899dc5f94a4ee9638f2ed56c51e

    • SSDEEP

      12288:jy90hFLRlUzwdnEAGuOuc9x8BNrqiaBOS+vZ2ACkIsKtGQB:jyul8wKuLraBxI9CxtG4

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks