Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    660fdd7df84b007edcf99aa73acf9c3df5ddeb65631282efa676068d7a26d273

  • Size

    827KB

  • Sample

    230422-jqkwdsdf43

  • MD5

    b9d51204d0b63b0c105c1d210d2aa6a2

  • SHA1

    d35530662a998841ccdf4f94f25c375a866c2188

  • SHA256

    660fdd7df84b007edcf99aa73acf9c3df5ddeb65631282efa676068d7a26d273

  • SHA512

    6a6c21a968286289c47a3c4b0e00fb62e8f246ee276b82c09d6cf58572f91f53fcece79ec4ebf0ec3d753e74c552234bcfdc074d78c485871818bb00cad7f529

  • SSDEEP

    12288:ky9032rr/U0GwGT+qPuMuVA2VIXmuOdzMBjgYpN/ZBbVdGGmq0nthjL+:kyh//Ufwg+QNu1IWuOdO8AN/ZhItdL+

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      660fdd7df84b007edcf99aa73acf9c3df5ddeb65631282efa676068d7a26d273

    • Size

      827KB

    • MD5

      b9d51204d0b63b0c105c1d210d2aa6a2

    • SHA1

      d35530662a998841ccdf4f94f25c375a866c2188

    • SHA256

      660fdd7df84b007edcf99aa73acf9c3df5ddeb65631282efa676068d7a26d273

    • SHA512

      6a6c21a968286289c47a3c4b0e00fb62e8f246ee276b82c09d6cf58572f91f53fcece79ec4ebf0ec3d753e74c552234bcfdc074d78c485871818bb00cad7f529

    • SSDEEP

      12288:ky9032rr/U0GwGT+qPuMuVA2VIXmuOdzMBjgYpN/ZBbVdGGmq0nthjL+:kyh//Ufwg+QNu1IWuOdO8AN/ZhItdL+

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks