Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bc065b7fbf368b4ecf64c81de3dea90af6f6e4d3ac651f7014b168ae600ca34e

  • Size

    563KB

  • Sample

    230423-v44ffage2x

  • MD5

    87b35c8d6a4b15d65f917573074894e6

  • SHA1

    43c61bffcaaec53ce44d48b3971eb5eeb82cc530

  • SHA256

    bc065b7fbf368b4ecf64c81de3dea90af6f6e4d3ac651f7014b168ae600ca34e

  • SHA512

    507163b14480351f94a62e63484db54ed710c94b6c30d7640dc2bb719c0624802af668252586de92d7ac058eb0932874b56de9a0f11f13d20da8e34629ebd340

  • SSDEEP

    12288:My90MMQrXrWgviZ6B28hmO4KvEfWpslT0r/eaTTaduug:MyRMQbrnLhmbaEfYsYmtdvg

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      bc065b7fbf368b4ecf64c81de3dea90af6f6e4d3ac651f7014b168ae600ca34e

    • Size

      563KB

    • MD5

      87b35c8d6a4b15d65f917573074894e6

    • SHA1

      43c61bffcaaec53ce44d48b3971eb5eeb82cc530

    • SHA256

      bc065b7fbf368b4ecf64c81de3dea90af6f6e4d3ac651f7014b168ae600ca34e

    • SHA512

      507163b14480351f94a62e63484db54ed710c94b6c30d7640dc2bb719c0624802af668252586de92d7ac058eb0932874b56de9a0f11f13d20da8e34629ebd340

    • SSDEEP

      12288:My90MMQrXrWgviZ6B28hmO4KvEfWpslT0r/eaTTaduug:MyRMQbrnLhmbaEfYsYmtdvg

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks