Overview

overview

10

Static

static

3

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    188bc9e4d4a1e08a29a6289130c3275d2ecf8e9d0bb7d9d507430894a27e6e75

  • Size

    695KB

  • Sample

    230426-cz7m7agd7y

  • MD5

    1a63833858ebc050a7904b232d80ea98

  • SHA1

    75214183c39f97a2b7ea5c7e6b85dc98b4234b0a

  • SHA256

    188bc9e4d4a1e08a29a6289130c3275d2ecf8e9d0bb7d9d507430894a27e6e75

  • SHA512

    a3a48a368215c9b3097c8f821ac58955ba6fc933072b5889d6fedf83b74e2cd15fbf0e10beb889856abd5a21b19bf64797f05fcc6bdf1be8ff524cc8e13430a7

  • SSDEEP

    12288:Qy90mtnyxSRJJderq3jGuO/Cb/+tZ9COLs9IoJgPKJ742WX63u18bzKLA+NY1T:QyTtyxSR4GCUb/+tXCH2OgPI4H63u18f

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      188bc9e4d4a1e08a29a6289130c3275d2ecf8e9d0bb7d9d507430894a27e6e75

    • Size

      695KB

    • MD5

      1a63833858ebc050a7904b232d80ea98

    • SHA1

      75214183c39f97a2b7ea5c7e6b85dc98b4234b0a

    • SHA256

      188bc9e4d4a1e08a29a6289130c3275d2ecf8e9d0bb7d9d507430894a27e6e75

    • SHA512

      a3a48a368215c9b3097c8f821ac58955ba6fc933072b5889d6fedf83b74e2cd15fbf0e10beb889856abd5a21b19bf64797f05fcc6bdf1be8ff524cc8e13430a7

    • SSDEEP

      12288:Qy90mtnyxSRJJderq3jGuO/Cb/+tZ9COLs9IoJgPKJ742WX63u18bzKLA+NY1T:QyTtyxSR4GCUb/+tXCH2OgPI4H63u18f

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks