Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2a286b5636b83346d0330ec3db01d4c5b7cbf08f26eb83755ed68d8ff36290e1

  • Size

    965KB

  • Sample

    230422-csr9xsbh56

  • MD5

    50f39440525dc1eb7fc72385c7b3fc70

  • SHA1

    2aa52b4f491c5a05a1e1a6522b894d610fa8631c

  • SHA256

    2a286b5636b83346d0330ec3db01d4c5b7cbf08f26eb83755ed68d8ff36290e1

  • SHA512

    a92802bc367f0b4844e22dc02ca6c2813844cc6570b1391be3a3eea62c4112f08acb0ee73c50efaddf7d221ec7845c35f4ebb760c4fbddbd368059404629d6e5

  • SSDEEP

    12288:+y90lxesi8fzbRJtwGDaHX5ScBK1c3Aig8sgrofUTOQxe1EJ7VmO7wbtcoEuVM7W:+yCesiUzXtrn1c7uUTbj7v7KZrM7xFO

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      2a286b5636b83346d0330ec3db01d4c5b7cbf08f26eb83755ed68d8ff36290e1

    • Size

      965KB

    • MD5

      50f39440525dc1eb7fc72385c7b3fc70

    • SHA1

      2aa52b4f491c5a05a1e1a6522b894d610fa8631c

    • SHA256

      2a286b5636b83346d0330ec3db01d4c5b7cbf08f26eb83755ed68d8ff36290e1

    • SHA512

      a92802bc367f0b4844e22dc02ca6c2813844cc6570b1391be3a3eea62c4112f08acb0ee73c50efaddf7d221ec7845c35f4ebb760c4fbddbd368059404629d6e5

    • SSDEEP

      12288:+y90lxesi8fzbRJtwGDaHX5ScBK1c3Aig8sgrofUTOQxe1EJ7VmO7wbtcoEuVM7W:+yCesiUzXtrn1c7uUTbj7v7KZrM7xFO

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks