Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    630209f178b93ed0e91e101463d037e7dc14630ffa15d7178ff3f158349235c1

  • Size

    706KB

  • Sample

    230422-g61knsdb94

  • MD5

    4f979b15b654cdb6db5505b32725f7d6

  • SHA1

    11b92b5dc5bc11f450a7442536a69ebb672045ab

  • SHA256

    630209f178b93ed0e91e101463d037e7dc14630ffa15d7178ff3f158349235c1

  • SHA512

    cc6bbbc52ae713d5a4c56277e7f600b46049cb251a6141f458afaaa8bb4078fbf25bcf6b6c407f85acbad132685bd93edf5b44988fa4eff5046e2513513a0bfc

  • SSDEEP

    12288:Ey90TIFP+JynQlkmZXpBl7d82H+98GWMxy0kE0rOAkojdr7JY8c0aFZ1rrvP+au:Ey1lQimZ702EjU9Stqr7TcRhrvP+N

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      630209f178b93ed0e91e101463d037e7dc14630ffa15d7178ff3f158349235c1

    • Size

      706KB

    • MD5

      4f979b15b654cdb6db5505b32725f7d6

    • SHA1

      11b92b5dc5bc11f450a7442536a69ebb672045ab

    • SHA256

      630209f178b93ed0e91e101463d037e7dc14630ffa15d7178ff3f158349235c1

    • SHA512

      cc6bbbc52ae713d5a4c56277e7f600b46049cb251a6141f458afaaa8bb4078fbf25bcf6b6c407f85acbad132685bd93edf5b44988fa4eff5046e2513513a0bfc

    • SSDEEP

      12288:Ey90TIFP+JynQlkmZXpBl7d82H+98GWMxy0kE0rOAkojdr7JY8c0aFZ1rrvP+au:Ey1lQimZ702EjU9Stqr7TcRhrvP+N

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks