Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0bcaf68a523bc4fa916f95e5e32a1750e17a45f9133c601c2eef8aa186f0b540

  • Size

    706KB

  • Sample

    230423-jxc45adg2x

  • MD5

    ed24feeef487325b7feef576c160efb6

  • SHA1

    634aaf85967bdf0b996b5122c47cca39e3359dd3

  • SHA256

    0bcaf68a523bc4fa916f95e5e32a1750e17a45f9133c601c2eef8aa186f0b540

  • SHA512

    fdee13f1fd59f67a164ccae921b49707829668a173ae6cf469c948a9814d57bc8dfcd0eb52784b6ccd5447ce7385eac81f340082914b88a0914c2a07763409ff

  • SSDEEP

    12288:My90SckSOzkFWNqDSNMT2O1EZOZruGDkq0ePfyF9mi1Za7iIiZtcOnMiZ8bvRUE:MyZe7WWlL6GYqlfS9minaeVMkQRUE

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      0bcaf68a523bc4fa916f95e5e32a1750e17a45f9133c601c2eef8aa186f0b540

    • Size

      706KB

    • MD5

      ed24feeef487325b7feef576c160efb6

    • SHA1

      634aaf85967bdf0b996b5122c47cca39e3359dd3

    • SHA256

      0bcaf68a523bc4fa916f95e5e32a1750e17a45f9133c601c2eef8aa186f0b540

    • SHA512

      fdee13f1fd59f67a164ccae921b49707829668a173ae6cf469c948a9814d57bc8dfcd0eb52784b6ccd5447ce7385eac81f340082914b88a0914c2a07763409ff

    • SSDEEP

      12288:My90SckSOzkFWNqDSNMT2O1EZOZruGDkq0ePfyF9mi1Za7iIiZtcOnMiZ8bvRUE:MyZe7WWlL6GYqlfS9minaeVMkQRUE

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks