Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    231b7012d301da1238b93a9f41454c888b14c48067bcd2769a101423d0430d01

  • Size

    706KB

  • Sample

    230422-g3vj9afa31

  • MD5

    9b62dd261db8305c131c27bd32b4edfb

  • SHA1

    4642a0551c24db4e92013a638ca180999772bf8f

  • SHA256

    231b7012d301da1238b93a9f41454c888b14c48067bcd2769a101423d0430d01

  • SHA512

    9f35e828d1ffc3197454e6700420b39cc5cb433ca0e9dd3b03ab3eb870eae342254e394b710e8c91fe525b28b6fcbe02c803ce9d5ab46bc4bc17f19078a7bc59

  • SSDEEP

    12288:Iy90sJhacXOk8pvu+3csP8QhssnCJW56+u2mECFqpCOdrtJY8c0SEZ/TXIz6HtF:Iyecd8pWynyW561E6qpjrtTcdCXIz6Hf

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      231b7012d301da1238b93a9f41454c888b14c48067bcd2769a101423d0430d01

    • Size

      706KB

    • MD5

      9b62dd261db8305c131c27bd32b4edfb

    • SHA1

      4642a0551c24db4e92013a638ca180999772bf8f

    • SHA256

      231b7012d301da1238b93a9f41454c888b14c48067bcd2769a101423d0430d01

    • SHA512

      9f35e828d1ffc3197454e6700420b39cc5cb433ca0e9dd3b03ab3eb870eae342254e394b710e8c91fe525b28b6fcbe02c803ce9d5ab46bc4bc17f19078a7bc59

    • SSDEEP

      12288:Iy90sJhacXOk8pvu+3csP8QhssnCJW56+u2mECFqpCOdrtJY8c0SEZ/TXIz6HtF:Iyecd8pWynyW561E6qpjrtTcdCXIz6Hf

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks