Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    50da75d83773c9f8c7e7deae4a0c47a821b2819e61e629ddf6c07df7646ef1f7

  • Size

    559KB

  • Sample

    230423-arz72ahg37

  • MD5

    fb28e1edd91e33febddae971021dcd2c

  • SHA1

    b28be303b179baf37e129ccdfff66bf23c9c7568

  • SHA256

    50da75d83773c9f8c7e7deae4a0c47a821b2819e61e629ddf6c07df7646ef1f7

  • SHA512

    15ad3415eddfe1eab5270b8bea7c4f4c258b04a4b34ed0626bcce318479ecc5a61f49d1a59f041e0dc57de16a9652c79b366072b064f5cad7e8b019e7582f86c

  • SSDEEP

    6144:byp0yN90QEszskvh+vRH7hZCD4Hm45jpg1f+V4r6x0eH+EcNuwm6Qk1w5FeRih7g:Hy90idMvrZCDqpFOr6uC+Ecc/mK3Wv

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      50da75d83773c9f8c7e7deae4a0c47a821b2819e61e629ddf6c07df7646ef1f7

    • Size

      559KB

    • MD5

      fb28e1edd91e33febddae971021dcd2c

    • SHA1

      b28be303b179baf37e129ccdfff66bf23c9c7568

    • SHA256

      50da75d83773c9f8c7e7deae4a0c47a821b2819e61e629ddf6c07df7646ef1f7

    • SHA512

      15ad3415eddfe1eab5270b8bea7c4f4c258b04a4b34ed0626bcce318479ecc5a61f49d1a59f041e0dc57de16a9652c79b366072b064f5cad7e8b019e7582f86c

    • SSDEEP

      6144:byp0yN90QEszskvh+vRH7hZCD4Hm45jpg1f+V4r6x0eH+EcNuwm6Qk1w5FeRih7g:Hy90idMvrZCDqpFOr6uC+Ecc/mK3Wv

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks