Overview

overview

10

Static

static

3

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    163bfe62c5d39a936a494e7b2fa43d81904b75b78ba5969b71bb5ab38bccb84b

  • Size

    694KB

  • Sample

    230425-qp4qfacd5x

  • MD5

    9a3eba68ad67529edc564c505ec8c3c7

  • SHA1

    38124ff5eb7c9725bb9b1aed76a03112e4acc304

  • SHA256

    163bfe62c5d39a936a494e7b2fa43d81904b75b78ba5969b71bb5ab38bccb84b

  • SHA512

    08c42096181c93b65c746f8deae38fff34b0fb373d48951e9a26f25b9e57ab33ca95809001a1e2eab1633f8fbd63ebd4a529bdf6338c61619b74e35e19d6929b

  • SSDEEP

    12288:cy90IyPBtTsXGYIBpMU1gnddNXtUHptLJ/AszcASlUx5vleu2KGw3Xs:cy3yPB+X8DR1gnbN9UH3fIASlUxWKtXs

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      163bfe62c5d39a936a494e7b2fa43d81904b75b78ba5969b71bb5ab38bccb84b

    • Size

      694KB

    • MD5

      9a3eba68ad67529edc564c505ec8c3c7

    • SHA1

      38124ff5eb7c9725bb9b1aed76a03112e4acc304

    • SHA256

      163bfe62c5d39a936a494e7b2fa43d81904b75b78ba5969b71bb5ab38bccb84b

    • SHA512

      08c42096181c93b65c746f8deae38fff34b0fb373d48951e9a26f25b9e57ab33ca95809001a1e2eab1633f8fbd63ebd4a529bdf6338c61619b74e35e19d6929b

    • SSDEEP

      12288:cy90IyPBtTsXGYIBpMU1gnddNXtUHptLJ/AszcASlUx5vleu2KGw3Xs:cy3yPB+X8DR1gnbN9UH3fIASlUxWKtXs

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks