Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ad1800ea7aa7a6a781b0d726deeb0f96985a0d8da76fa19fdec63872cb72474a

  • Size

    564KB

  • Sample

    230424-a8q1paae5x

  • MD5

    9f82e8cd418fa72a25423e8354ba0eda

  • SHA1

    cd040bdd90c4f7d0ec65d5dbb9bfefd4d1f9f931

  • SHA256

    ad1800ea7aa7a6a781b0d726deeb0f96985a0d8da76fa19fdec63872cb72474a

  • SHA512

    e4a0d762ad7ead224184ab028652f989e182dc6d62a15cf671e6bb9dd101d7a6f355346fc3986835f1cd504275e84d29b14e4f3035215ceb12361c77bedf53c6

  • SSDEEP

    12288:Zy90KCM/DHdOZ04vG3mIKVzR0/wzCMCmAw8cSso:ZyXzD9ge3U9a/wONmAwO

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      ad1800ea7aa7a6a781b0d726deeb0f96985a0d8da76fa19fdec63872cb72474a

    • Size

      564KB

    • MD5

      9f82e8cd418fa72a25423e8354ba0eda

    • SHA1

      cd040bdd90c4f7d0ec65d5dbb9bfefd4d1f9f931

    • SHA256

      ad1800ea7aa7a6a781b0d726deeb0f96985a0d8da76fa19fdec63872cb72474a

    • SHA512

      e4a0d762ad7ead224184ab028652f989e182dc6d62a15cf671e6bb9dd101d7a6f355346fc3986835f1cd504275e84d29b14e4f3035215ceb12361c77bedf53c6

    • SSDEEP

      12288:Zy90KCM/DHdOZ04vG3mIKVzR0/wzCMCmAw8cSso:ZyXzD9ge3U9a/wONmAwO

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks