Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    211165d3b218bbb05a08261b902e1e3f4765f7b1e2485aeb3553cb664d945f90

  • Size

    747KB

  • Sample

    230424-x9xaesfh31

  • MD5

    ba212b24f9790d05f0e1147716a036fb

  • SHA1

    f04d16634fe385667dd30295b17e4a53c8c3b417

  • SHA256

    211165d3b218bbb05a08261b902e1e3f4765f7b1e2485aeb3553cb664d945f90

  • SHA512

    f3f7604ea5582027c0a1bc92e58c17136e08f5fcc93a82634fe9f686cc7e9594a29b8137c92d88cbfc912cf56d8e1a0415eea76474158f35bb81c333452ca27f

  • SSDEEP

    12288:iy90wBufPk4j8pJbGNI/4YyWWPgrqqHCEZ8NTPtu6EBCSCEIiW8pn2bobBRQ:iyXBunk4YTD4PPgrqQCHcCtiW8Nw

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      211165d3b218bbb05a08261b902e1e3f4765f7b1e2485aeb3553cb664d945f90

    • Size

      747KB

    • MD5

      ba212b24f9790d05f0e1147716a036fb

    • SHA1

      f04d16634fe385667dd30295b17e4a53c8c3b417

    • SHA256

      211165d3b218bbb05a08261b902e1e3f4765f7b1e2485aeb3553cb664d945f90

    • SHA512

      f3f7604ea5582027c0a1bc92e58c17136e08f5fcc93a82634fe9f686cc7e9594a29b8137c92d88cbfc912cf56d8e1a0415eea76474158f35bb81c333452ca27f

    • SSDEEP

      12288:iy90wBufPk4j8pJbGNI/4YyWWPgrqqHCEZ8NTPtu6EBCSCEIiW8pn2bobBRQ:iyXBunk4YTD4PPgrqQCHcCtiW8Nw

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks