Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bd84636945da524a119ef353a4c07faf89fb8516ee142cf50fae41a41a596fa1

  • Size

    563KB

  • Sample

    230423-rn2p5adg83

  • MD5

    131df6a9c8da0b6c4283632a5ba03270

  • SHA1

    196aa22f91219ff3949f250cb314fb4a29e55c6f

  • SHA256

    bd84636945da524a119ef353a4c07faf89fb8516ee142cf50fae41a41a596fa1

  • SHA512

    9aaad9f4c6e795b3b47e5de443760cf84f5196ef56411ad9b1e0a9f3c890ce9836f9ffa7a54a171047657c64e5ec9610d27824c181c2eb85c99c21c1abf12e4b

  • SSDEEP

    12288:My90YiKN+rA4m2Iy+jL+uiMnzbIVIrLQGUKLE49e:My/z+rAT2Iy+3+IfnQGUKLEn

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      bd84636945da524a119ef353a4c07faf89fb8516ee142cf50fae41a41a596fa1

    • Size

      563KB

    • MD5

      131df6a9c8da0b6c4283632a5ba03270

    • SHA1

      196aa22f91219ff3949f250cb314fb4a29e55c6f

    • SHA256

      bd84636945da524a119ef353a4c07faf89fb8516ee142cf50fae41a41a596fa1

    • SHA512

      9aaad9f4c6e795b3b47e5de443760cf84f5196ef56411ad9b1e0a9f3c890ce9836f9ffa7a54a171047657c64e5ec9610d27824c181c2eb85c99c21c1abf12e4b

    • SSDEEP

      12288:My90YiKN+rA4m2Iy+jL+uiMnzbIVIrLQGUKLE49e:My/z+rAT2Iy+3+IfnQGUKLEn

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks