Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c214aa2b8151c737f906212122c35ff03f7fa35ae3d15bb7298f89b8f297f67f

  • Size

    704KB

  • Sample

    230423-m4xznach65

  • MD5

    71980f175c72876a0309755567b9c7d3

  • SHA1

    9f5b5f29bafc4c607fbfc8b5bbedf7d371814a83

  • SHA256

    c214aa2b8151c737f906212122c35ff03f7fa35ae3d15bb7298f89b8f297f67f

  • SHA512

    e79e483cf9a04b4a6017311e0cc5b1dbed321aa4b54e7a49e9df1a3653d1a9581b15dd67247a11c6ee599f05b4bebbb94d9986884945e203d8a637a1e75566af

  • SSDEEP

    12288:Xy90Encil9Uvz+RzT5B88rJozyp6Az/nvzKSrHiIYd3aOqEBfowJ8:Xyiq92itTweoI6invzKwHiIYd3ME9J8

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      c214aa2b8151c737f906212122c35ff03f7fa35ae3d15bb7298f89b8f297f67f

    • Size

      704KB

    • MD5

      71980f175c72876a0309755567b9c7d3

    • SHA1

      9f5b5f29bafc4c607fbfc8b5bbedf7d371814a83

    • SHA256

      c214aa2b8151c737f906212122c35ff03f7fa35ae3d15bb7298f89b8f297f67f

    • SHA512

      e79e483cf9a04b4a6017311e0cc5b1dbed321aa4b54e7a49e9df1a3653d1a9581b15dd67247a11c6ee599f05b4bebbb94d9986884945e203d8a637a1e75566af

    • SSDEEP

      12288:Xy90Encil9Uvz+RzT5B88rJozyp6Az/nvzKSrHiIYd3aOqEBfowJ8:Xyiq92itTweoI6invzKwHiIYd3ME9J8

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks