Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6b2223cc18e0dbc60bfb90b42458c880fdc9a9d9f071435c81fed71cbce61c9a

  • Size

    704KB

  • Sample

    230423-1bf3bshe9y

  • MD5

    b510b9a5e429a3e7957b4957ac477243

  • SHA1

    59ec177494590d393d5dc024ba49fe0f15eda14f

  • SHA256

    6b2223cc18e0dbc60bfb90b42458c880fdc9a9d9f071435c81fed71cbce61c9a

  • SHA512

    416b9256fc1f4ad9b77296082bdac4713fe463bd3553f5c1505671a0169f9696a0fd6f84caf9aeeeda64e4f8674eb1f1f3b4adf4854184581bb880061e22ada5

  • SSDEEP

    12288:py90f9YLscAyHwSK5bL0Vxw+58SD5zFJI1VzCfmIzeM+7/KjYQ2eL:pyy9gAyRK5fcaG8SDlm92mI6BbQj

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      6b2223cc18e0dbc60bfb90b42458c880fdc9a9d9f071435c81fed71cbce61c9a

    • Size

      704KB

    • MD5

      b510b9a5e429a3e7957b4957ac477243

    • SHA1

      59ec177494590d393d5dc024ba49fe0f15eda14f

    • SHA256

      6b2223cc18e0dbc60bfb90b42458c880fdc9a9d9f071435c81fed71cbce61c9a

    • SHA512

      416b9256fc1f4ad9b77296082bdac4713fe463bd3553f5c1505671a0169f9696a0fd6f84caf9aeeeda64e4f8674eb1f1f3b4adf4854184581bb880061e22ada5

    • SSDEEP

      12288:py90f9YLscAyHwSK5bL0Vxw+58SD5zFJI1VzCfmIzeM+7/KjYQ2eL:pyy9gAyRK5fcaG8SDlm92mI6BbQj

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks