Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d4d159c1a88daa78d7cfeb54e177e2faf784ac80284954ebe682cac606f1168f

  • Size

    560KB

  • Sample

    230423-fdgfnacf81

  • MD5

    28dac51ca694c297140e1f28bad29114

  • SHA1

    86f07be0a60ca155d0c23fe09736e18f31fc1e98

  • SHA256

    d4d159c1a88daa78d7cfeb54e177e2faf784ac80284954ebe682cac606f1168f

  • SHA512

    40817fae8973f73d94ee1fcaaae0313b9b81b5d0e8ef6de01ba88f9b621ad69e0ca0be9fefa9a9466b98a10cc976db8bf7181e11266e261ffd09889ee4ad3ceb

  • SSDEEP

    12288:Sy90Nc6nOkyzbvejERzl2PphyefFTV1BAudVJHgoTU82b:SyGOkyzbvejERzg/pbSJb

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      d4d159c1a88daa78d7cfeb54e177e2faf784ac80284954ebe682cac606f1168f

    • Size

      560KB

    • MD5

      28dac51ca694c297140e1f28bad29114

    • SHA1

      86f07be0a60ca155d0c23fe09736e18f31fc1e98

    • SHA256

      d4d159c1a88daa78d7cfeb54e177e2faf784ac80284954ebe682cac606f1168f

    • SHA512

      40817fae8973f73d94ee1fcaaae0313b9b81b5d0e8ef6de01ba88f9b621ad69e0ca0be9fefa9a9466b98a10cc976db8bf7181e11266e261ffd09889ee4ad3ceb

    • SSDEEP

      12288:Sy90Nc6nOkyzbvejERzl2PphyefFTV1BAudVJHgoTU82b:SyGOkyzbvejERzg/pbSJb

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks