Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    69d7d6a9d06f4d52d61cf27d94cf46c2abdec15b9039a38c664eb2f1780358ca

  • Size

    612KB

  • Sample

    230424-rkkbnscc63

  • MD5

    611910b6641b1e94b25bb975da0e54cd

  • SHA1

    e5a1c621597ae286354a822bde6aee750d875d94

  • SHA256

    69d7d6a9d06f4d52d61cf27d94cf46c2abdec15b9039a38c664eb2f1780358ca

  • SHA512

    1e605d00633e9ac07d59f75c8bff0818ef97a7623639029724af4c89c1a732d01a03390325611c81cdfba550a2cf005f69f86374da1b3e0b7c690fa3547627f8

  • SSDEEP

    12288:Wy90RJpUKoaMI8glXL+u9KYKp7i6WqxYwgGqPLp+c7K:Wy+QKo/I88Xl9ep7DpFgdDcJ

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      69d7d6a9d06f4d52d61cf27d94cf46c2abdec15b9039a38c664eb2f1780358ca

    • Size

      612KB

    • MD5

      611910b6641b1e94b25bb975da0e54cd

    • SHA1

      e5a1c621597ae286354a822bde6aee750d875d94

    • SHA256

      69d7d6a9d06f4d52d61cf27d94cf46c2abdec15b9039a38c664eb2f1780358ca

    • SHA512

      1e605d00633e9ac07d59f75c8bff0818ef97a7623639029724af4c89c1a732d01a03390325611c81cdfba550a2cf005f69f86374da1b3e0b7c690fa3547627f8

    • SSDEEP

      12288:Wy90RJpUKoaMI8glXL+u9KYKp7i6WqxYwgGqPLp+c7K:Wy+QKo/I88Xl9ep7DpFgdDcJ

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks