Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    513835bdd33f5fcc291767ff1290ea89f7bfd3323606b81cbd0c4deb6a6cd892

  • Size

    559KB

  • Sample

    230422-tfl1taff22

  • MD5

    4aad5f7436a2e93e2bf4dae7749c6ad3

  • SHA1

    ebf3546a6c399350cdf7870b9071475dfaedec95

  • SHA256

    513835bdd33f5fcc291767ff1290ea89f7bfd3323606b81cbd0c4deb6a6cd892

  • SHA512

    f9ca65562d5573697ff38fe7881246c471411d199daad72a9035e183d3b51b4e7046a27d853a6b49191b226002714a3d419f60923658ad92e97790b4b59eb032

  • SSDEEP

    6144:swp0yN90QE03IhPwGsN7UfWOkBJ5KWXxLFibewjL8ym+qTLpuj6MFti4mTkFPxWN:yy90gIQ7sLkBTVgCwPJmznqFtrf09g6

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      513835bdd33f5fcc291767ff1290ea89f7bfd3323606b81cbd0c4deb6a6cd892

    • Size

      559KB

    • MD5

      4aad5f7436a2e93e2bf4dae7749c6ad3

    • SHA1

      ebf3546a6c399350cdf7870b9071475dfaedec95

    • SHA256

      513835bdd33f5fcc291767ff1290ea89f7bfd3323606b81cbd0c4deb6a6cd892

    • SHA512

      f9ca65562d5573697ff38fe7881246c471411d199daad72a9035e183d3b51b4e7046a27d853a6b49191b226002714a3d419f60923658ad92e97790b4b59eb032

    • SSDEEP

      6144:swp0yN90QE03IhPwGsN7UfWOkBJ5KWXxLFibewjL8ym+qTLpuj6MFti4mTkFPxWN:yy90gIQ7sLkBTVgCwPJmznqFtrf09g6

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks