Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e02d048e43c490ad4d1cab295bcbb9c8e8ef2e5aab210625d2e86122ac962f74

  • Size

    569KB

  • Sample

    230422-kntaesdh45

  • MD5

    4a4d429643b3b4350d309c3947195024

  • SHA1

    65e0f60ac92a78855fad7ca36fe3a7a5763414a7

  • SHA256

    e02d048e43c490ad4d1cab295bcbb9c8e8ef2e5aab210625d2e86122ac962f74

  • SHA512

    b8e77a2ff6f52be2cdbbbfb5450d8b1e5083d7db818e9499f44f51f2a37d3f90fb819c84d3d72ed3410d7aa4426c57749938b3ae10b0f0fc80232c011ed272b3

  • SSDEEP

    12288:Ny903BOj8qjMdAUjMztstV24JOxE9JJOKiz6/Ht81tB2aV86CSbX:NygOoqwdAUjogb0EPIySB2+kuX

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      e02d048e43c490ad4d1cab295bcbb9c8e8ef2e5aab210625d2e86122ac962f74

    • Size

      569KB

    • MD5

      4a4d429643b3b4350d309c3947195024

    • SHA1

      65e0f60ac92a78855fad7ca36fe3a7a5763414a7

    • SHA256

      e02d048e43c490ad4d1cab295bcbb9c8e8ef2e5aab210625d2e86122ac962f74

    • SHA512

      b8e77a2ff6f52be2cdbbbfb5450d8b1e5083d7db818e9499f44f51f2a37d3f90fb819c84d3d72ed3410d7aa4426c57749938b3ae10b0f0fc80232c011ed272b3

    • SSDEEP

      12288:Ny903BOj8qjMdAUjMztstV24JOxE9JJOKiz6/Ht81tB2aV86CSbX:NygOoqwdAUjogb0EPIySB2+kuX

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks