Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    46d73a0ae1e7724e4f44a78bae6f1e006c32f91f9dba25235ae87f0a5a902197

  • Size

    569KB

  • Sample

    230422-kpetesdh48

  • MD5

    058297a95866fa3292c43488fcefafe8

  • SHA1

    77589a206ceb047b537649e823d4f8e2a8889788

  • SHA256

    46d73a0ae1e7724e4f44a78bae6f1e006c32f91f9dba25235ae87f0a5a902197

  • SHA512

    a86e2ed8f55e71b002bfa38b01b8c38e096dcfd457ceb415df774f4d44bb52ee706f31a135d2220da72704c29d1402b81b64982e53dfdecdee331310f93ce4ce

  • SSDEEP

    12288:ry907jbukjC7iJ0YxE9JaOZkZ6/4V8ndf7B9FV86Cx/9X:ryUKkWLMEPxNFB9/kb

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      46d73a0ae1e7724e4f44a78bae6f1e006c32f91f9dba25235ae87f0a5a902197

    • Size

      569KB

    • MD5

      058297a95866fa3292c43488fcefafe8

    • SHA1

      77589a206ceb047b537649e823d4f8e2a8889788

    • SHA256

      46d73a0ae1e7724e4f44a78bae6f1e006c32f91f9dba25235ae87f0a5a902197

    • SHA512

      a86e2ed8f55e71b002bfa38b01b8c38e096dcfd457ceb415df774f4d44bb52ee706f31a135d2220da72704c29d1402b81b64982e53dfdecdee331310f93ce4ce

    • SSDEEP

      12288:ry907jbukjC7iJ0YxE9JaOZkZ6/4V8ndf7B9FV86Cx/9X:ryUKkWLMEPxNFB9/kb

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks