Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    afddaf6524e226692911211e70bf5c1ab3e1a60df2cea44465773828b41e7e90

  • Size

    568KB

  • Sample

    230422-rexptafb73

  • MD5

    c6c8b9e9cadd37da25bc5b983759f283

  • SHA1

    97ae5487c38587b058a828595467af6b117e125b

  • SHA256

    afddaf6524e226692911211e70bf5c1ab3e1a60df2cea44465773828b41e7e90

  • SHA512

    020cd09cc0d2e0cc961729e33354fd2f20ce04e642bf09967c800ebd999b918fa30c9a07ecb97f20da496c9659f39b12ffacf107301b1dbae68880ce4fa1ccd8

  • SSDEEP

    12288:5y90xQ9u6DWwzFRZXZtRhvQH7dtkWdoH3:5yYWWwNFhmkWSH3

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      afddaf6524e226692911211e70bf5c1ab3e1a60df2cea44465773828b41e7e90

    • Size

      568KB

    • MD5

      c6c8b9e9cadd37da25bc5b983759f283

    • SHA1

      97ae5487c38587b058a828595467af6b117e125b

    • SHA256

      afddaf6524e226692911211e70bf5c1ab3e1a60df2cea44465773828b41e7e90

    • SHA512

      020cd09cc0d2e0cc961729e33354fd2f20ce04e642bf09967c800ebd999b918fa30c9a07ecb97f20da496c9659f39b12ffacf107301b1dbae68880ce4fa1ccd8

    • SSDEEP

      12288:5y90xQ9u6DWwzFRZXZtRhvQH7dtkWdoH3:5yYWWwNFhmkWSH3

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks