Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a4fa6aef2e37ea4fb39cbb2821b7a879a898f503a2a5909bbd0a5854f2deb96a

  • Size

    704KB

  • Sample

    230423-rmr5asdg75

  • MD5

    f404a0f4d249b73f94444ebadb8b2afa

  • SHA1

    68c5327adb13320bc324d3c631c5bbff075f822a

  • SHA256

    a4fa6aef2e37ea4fb39cbb2821b7a879a898f503a2a5909bbd0a5854f2deb96a

  • SHA512

    1f95754ec8315a2839bad4226b641e1dc9420ff21767bd41e0459e50c29c7e4ba36c5f5749caae9d9cb51f8aebcf68963c05365f6783264bcc6a72c2e8c7e32d

  • SSDEEP

    12288:/y90bG8znNaG4BPRneu3NNxxCWk/bhRHnp+JBr6gaTbRI9uDP2zCwUrjkIYlnUDc:/yyNf4FReuFxTkHHnsn6g79f8j6gxy

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      a4fa6aef2e37ea4fb39cbb2821b7a879a898f503a2a5909bbd0a5854f2deb96a

    • Size

      704KB

    • MD5

      f404a0f4d249b73f94444ebadb8b2afa

    • SHA1

      68c5327adb13320bc324d3c631c5bbff075f822a

    • SHA256

      a4fa6aef2e37ea4fb39cbb2821b7a879a898f503a2a5909bbd0a5854f2deb96a

    • SHA512

      1f95754ec8315a2839bad4226b641e1dc9420ff21767bd41e0459e50c29c7e4ba36c5f5749caae9d9cb51f8aebcf68963c05365f6783264bcc6a72c2e8c7e32d

    • SSDEEP

      12288:/y90bG8znNaG4BPRneu3NNxxCWk/bhRHnp+JBr6gaTbRI9uDP2zCwUrjkIYlnUDc:/yyNf4FReuFxTkHHnsn6g79f8j6gxy

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks