Overview

overview

10

Static

static

3

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    28b30ed3eeb1e18019d6ad3f0410ee47d4a0bb13acfe6721e58be3f99e636764

  • Size

    642KB

  • Sample

    230425-vy6nlsdf8w

  • MD5

    0d23ca2c40db9c62b7bbc71cca240788

  • SHA1

    15daa7a1b6fec5c0c45db2d50a5c6741a84c9971

  • SHA256

    28b30ed3eeb1e18019d6ad3f0410ee47d4a0bb13acfe6721e58be3f99e636764

  • SHA512

    37643f585da25c544145b5c2180b319c5da774ad533e980ab7ee6cccad2cc9b2b95c749f94224f8d954e856b7ad9d957744c53baa07e5e1aeb7aafb46aa4c053

  • SSDEEP

    12288:oy90YQv7gXEKO75TbRtH1izLDA48ZsVNeZ9/4ejEuKoEW:oy+OfOVb31iTAZMNeZ9Aej9/

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      28b30ed3eeb1e18019d6ad3f0410ee47d4a0bb13acfe6721e58be3f99e636764

    • Size

      642KB

    • MD5

      0d23ca2c40db9c62b7bbc71cca240788

    • SHA1

      15daa7a1b6fec5c0c45db2d50a5c6741a84c9971

    • SHA256

      28b30ed3eeb1e18019d6ad3f0410ee47d4a0bb13acfe6721e58be3f99e636764

    • SHA512

      37643f585da25c544145b5c2180b319c5da774ad533e980ab7ee6cccad2cc9b2b95c749f94224f8d954e856b7ad9d957744c53baa07e5e1aeb7aafb46aa4c053

    • SSDEEP

      12288:oy90YQv7gXEKO75TbRtH1izLDA48ZsVNeZ9/4ejEuKoEW:oy+OfOVb31iTAZMNeZ9Aej9/

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks