Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0e9451cbc11b5423392a964479fd8fe1e1ab178e86b1e08a1e3ea40652dfa5d4

  • Size

    752KB

  • Sample

    230424-mfgmrsbb69

  • MD5

    657adff7f2fdbee6c72779d4d7542666

  • SHA1

    0759815a8bd8ccaade85d22a89ddc898fc5ed06d

  • SHA256

    0e9451cbc11b5423392a964479fd8fe1e1ab178e86b1e08a1e3ea40652dfa5d4

  • SHA512

    ec30754f5ff8eb1b37d0c51c5c4a4fb4b3e10988319b9b71f065d4c604ee81e4ea337accf5e3594823f6e27a79b3beba488a3f5ff95efee41416614a6e6b0092

  • SSDEEP

    12288:/y90IQIZ1mPt2xpKYQxW5kyuhLQyJqq5rHeTOxdrvKW/6VgMZZ5e:/yYs1mouYQECyyLQyQ9Q1vVCk

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      0e9451cbc11b5423392a964479fd8fe1e1ab178e86b1e08a1e3ea40652dfa5d4

    • Size

      752KB

    • MD5

      657adff7f2fdbee6c72779d4d7542666

    • SHA1

      0759815a8bd8ccaade85d22a89ddc898fc5ed06d

    • SHA256

      0e9451cbc11b5423392a964479fd8fe1e1ab178e86b1e08a1e3ea40652dfa5d4

    • SHA512

      ec30754f5ff8eb1b37d0c51c5c4a4fb4b3e10988319b9b71f065d4c604ee81e4ea337accf5e3594823f6e27a79b3beba488a3f5ff95efee41416614a6e6b0092

    • SSDEEP

      12288:/y90IQIZ1mPt2xpKYQxW5kyuhLQyJqq5rHeTOxdrvKW/6VgMZZ5e:/yYs1mouYQECyyLQyQ9Q1vVCk

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks