Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    997b9c2b775dfa44517add44451011a2ed42fb19247e6b0354076fd14b11e5df

  • Size

    746KB

  • Sample

    230424-zcg6cagb7z

  • MD5

    8439689c22489b36cf84c41d1ba42158

  • SHA1

    9cc0c5c72c459d861094b23baa79ab241d832e96

  • SHA256

    997b9c2b775dfa44517add44451011a2ed42fb19247e6b0354076fd14b11e5df

  • SHA512

    92d7f8feef3c117d10f5d1c6305e9a0776cf05d991aab37e3c56d196224ef3a4282696318184bf8eb4506c248a77a33deb4deda79089e962ae4ee7ea265f6240

  • SSDEEP

    12288:ty90uhpOIVF/vUsIBQWkwdw3Fn3/YIXE5aEbr4wkSay68Q:tyJn1hUQWkwdwVPvX+RbrZWf8Q

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      997b9c2b775dfa44517add44451011a2ed42fb19247e6b0354076fd14b11e5df

    • Size

      746KB

    • MD5

      8439689c22489b36cf84c41d1ba42158

    • SHA1

      9cc0c5c72c459d861094b23baa79ab241d832e96

    • SHA256

      997b9c2b775dfa44517add44451011a2ed42fb19247e6b0354076fd14b11e5df

    • SHA512

      92d7f8feef3c117d10f5d1c6305e9a0776cf05d991aab37e3c56d196224ef3a4282696318184bf8eb4506c248a77a33deb4deda79089e962ae4ee7ea265f6240

    • SSDEEP

      12288:ty90uhpOIVF/vUsIBQWkwdw3Fn3/YIXE5aEbr4wkSay68Q:tyJn1hUQWkwdwVPvX+RbrZWf8Q

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks