Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ee619787c2607bace3490b38e2eba13d116eb279abfbf00536638fb160faa1d1

  • Size

    566KB

  • Sample

    230423-mqc3bsee2v

  • MD5

    7db88f076acf1f9d02f58a8aa3bca404

  • SHA1

    1dc5fd22e32fe8ce3ede567d14747273a0db23c8

  • SHA256

    ee619787c2607bace3490b38e2eba13d116eb279abfbf00536638fb160faa1d1

  • SHA512

    55b9a4972070378d66a0729799c033a1a4856f9a1d117ae4fdcf7ae85714fb2b6332d72f7ceeb300391ef1221c032bae587677f6d96d39452636e49d038b39cc

  • SSDEEP

    12288:sy90B8+wo1n62P8jRiNfFac8s8S4J3m/DSQf:sy0aoZJWRKfIcB8S4JW/DSQf

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      ee619787c2607bace3490b38e2eba13d116eb279abfbf00536638fb160faa1d1

    • Size

      566KB

    • MD5

      7db88f076acf1f9d02f58a8aa3bca404

    • SHA1

      1dc5fd22e32fe8ce3ede567d14747273a0db23c8

    • SHA256

      ee619787c2607bace3490b38e2eba13d116eb279abfbf00536638fb160faa1d1

    • SHA512

      55b9a4972070378d66a0729799c033a1a4856f9a1d117ae4fdcf7ae85714fb2b6332d72f7ceeb300391ef1221c032bae587677f6d96d39452636e49d038b39cc

    • SSDEEP

      12288:sy90B8+wo1n62P8jRiNfFac8s8S4J3m/DSQf:sy0aoZJWRKfIcB8S4JW/DSQf

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks