Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c3e74c82bae82001a93222047c357ca3b97192270878fafefc36be960d4d498d

  • Size

    563KB

  • Sample

    230423-xrhz3sgh81

  • MD5

    30ba6cd45a22d5bac01718e5020710ba

  • SHA1

    6dc13bd036e6a0aa65fb46dd8d7a4f4e9feaccdb

  • SHA256

    c3e74c82bae82001a93222047c357ca3b97192270878fafefc36be960d4d498d

  • SHA512

    fb894f3c466bfaeae6a72bed04e66a18a3bce566606724049df948b84a28e0939d74ad7c82830b0de9dfed19db9c0c8d8396068097104d6700074934468efabd

  • SSDEEP

    12288:+y90inssr5tnKC6ePJFPEfypzzB0r+eaUGD2eQQYc:+yD5rjb3Efcz8RTGD2eQTc

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      c3e74c82bae82001a93222047c357ca3b97192270878fafefc36be960d4d498d

    • Size

      563KB

    • MD5

      30ba6cd45a22d5bac01718e5020710ba

    • SHA1

      6dc13bd036e6a0aa65fb46dd8d7a4f4e9feaccdb

    • SHA256

      c3e74c82bae82001a93222047c357ca3b97192270878fafefc36be960d4d498d

    • SHA512

      fb894f3c466bfaeae6a72bed04e66a18a3bce566606724049df948b84a28e0939d74ad7c82830b0de9dfed19db9c0c8d8396068097104d6700074934468efabd

    • SSDEEP

      12288:+y90inssr5tnKC6ePJFPEfypzzB0r+eaUGD2eQQYc:+yD5rjb3Efcz8RTGD2eQTc

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks