Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    78f83d8ec8e8d418ad3e485b9c8968797c1981b5e56d431487ea20c7210a0c65

  • Size

    965KB

  • Sample

    230422-g33kvsfa4t

  • MD5

    68e8ecf8666a21e420450996221cba84

  • SHA1

    5935636d813b5f23a15f093f517c3467131a12ed

  • SHA256

    78f83d8ec8e8d418ad3e485b9c8968797c1981b5e56d431487ea20c7210a0c65

  • SHA512

    4594d8e7baa3cfdc5aaf10a76d3ba930a3ed0d869b3df3364f0a22c11ca590147404925dce4cbf54c01a141277dc491a69af363ea1892922dba5a91c04cb8033

  • SSDEEP

    24576:NyejFHCDJDnih/Zc+lj2vrUZcG2lIMt+NY/pa/:oejFHUo/ZcRv3G2lIMcNYB

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      78f83d8ec8e8d418ad3e485b9c8968797c1981b5e56d431487ea20c7210a0c65

    • Size

      965KB

    • MD5

      68e8ecf8666a21e420450996221cba84

    • SHA1

      5935636d813b5f23a15f093f517c3467131a12ed

    • SHA256

      78f83d8ec8e8d418ad3e485b9c8968797c1981b5e56d431487ea20c7210a0c65

    • SHA512

      4594d8e7baa3cfdc5aaf10a76d3ba930a3ed0d869b3df3364f0a22c11ca590147404925dce4cbf54c01a141277dc491a69af363ea1892922dba5a91c04cb8033

    • SSDEEP

      24576:NyejFHCDJDnih/Zc+lj2vrUZcG2lIMt+NY/pa/:oejFHUo/ZcRv3G2lIMcNYB

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks