Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4eebc21116fbc3df4d28ef68f0c860c48bb35cb652cbe66f8ea31609ce04dd18

  • Size

    965KB

  • Sample

    230422-hwtj2sdd55

  • MD5

    ed899031adbc8cb646e74f6a41956ab6

  • SHA1

    45931f3b65c5e62e8beab192b44d2f8094fa9f80

  • SHA256

    4eebc21116fbc3df4d28ef68f0c860c48bb35cb652cbe66f8ea31609ce04dd18

  • SHA512

    779e7a9c5830a49847204373417eefd444a9f9b1515c6b273f68ef33120a71c05b536d7cac8094b13ee126b2a54303ad5604f41a637e399d7271ee4fa618486a

  • SSDEEP

    12288:Wy90s57AHTO/ex1/EAzErZH65TWOg5IadrU408c0aGZxSVd0jwcpeEmkNl62PKNL:Wyd5ru/uwWH5FrUwctdVd08c7f6Nrv

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      4eebc21116fbc3df4d28ef68f0c860c48bb35cb652cbe66f8ea31609ce04dd18

    • Size

      965KB

    • MD5

      ed899031adbc8cb646e74f6a41956ab6

    • SHA1

      45931f3b65c5e62e8beab192b44d2f8094fa9f80

    • SHA256

      4eebc21116fbc3df4d28ef68f0c860c48bb35cb652cbe66f8ea31609ce04dd18

    • SHA512

      779e7a9c5830a49847204373417eefd444a9f9b1515c6b273f68ef33120a71c05b536d7cac8094b13ee126b2a54303ad5604f41a637e399d7271ee4fa618486a

    • SSDEEP

      12288:Wy90s57AHTO/ex1/EAzErZH65TWOg5IadrU408c0aGZxSVd0jwcpeEmkNl62PKNL:Wyd5ru/uwWH5FrUwctdVd08c7f6Nrv

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks