Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b154b75de84603aa701e4e28de5316c4c39d244f0833f20fd92d0a0b00e33b2e

  • Size

    705KB

  • Sample

    230423-k2ghsacd95

  • MD5

    d7e13408767e69fb808338a37f8b221c

  • SHA1

    aecf25afdc6e33d7271d000d028193ae1cbaa273

  • SHA256

    b154b75de84603aa701e4e28de5316c4c39d244f0833f20fd92d0a0b00e33b2e

  • SHA512

    5386658bb83ad18bddc267dcbed5fe917512425c8d877c539d7f9e35368b01e5d9e1294c5afbb09d4c9f3fd19d1db644acb54d0d939e3c3970e077ee88e6f810

  • SSDEEP

    12288:Sy906u4F5wTBUoM+6ZsoA+d8ijILGOs/yNotIYSHDiIyBzyYRI:Sy1V/oMfK+fILa/yNotIYEDiIyBzzi

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      b154b75de84603aa701e4e28de5316c4c39d244f0833f20fd92d0a0b00e33b2e

    • Size

      705KB

    • MD5

      d7e13408767e69fb808338a37f8b221c

    • SHA1

      aecf25afdc6e33d7271d000d028193ae1cbaa273

    • SHA256

      b154b75de84603aa701e4e28de5316c4c39d244f0833f20fd92d0a0b00e33b2e

    • SHA512

      5386658bb83ad18bddc267dcbed5fe917512425c8d877c539d7f9e35368b01e5d9e1294c5afbb09d4c9f3fd19d1db644acb54d0d939e3c3970e077ee88e6f810

    • SSDEEP

      12288:Sy906u4F5wTBUoM+6ZsoA+d8ijILGOs/yNotIYSHDiIyBzyYRI:Sy1V/oMfK+fILa/yNotIYEDiIyBzzi

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks