Overview

overview

10

Static

static

3

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cb304900e55e096354696c56b40bf51722acd4ec00b6feeccf8d0f4cd2e23c85

  • Size

    695KB

  • Sample

    230426-lgxjyagd89

  • MD5

    4803213ace367c4ae4906407f263fefd

  • SHA1

    669be67c184370f38361fb7835941c7605be4286

  • SHA256

    cb304900e55e096354696c56b40bf51722acd4ec00b6feeccf8d0f4cd2e23c85

  • SHA512

    c8aa44dd051059f85aa33d0b3dcde2994d377e2fc8cee5761bd7b7a2c1cf80ac6670d491d60d591f709ac6510b9a67d8d57ba4b150bf7a83b72e4b356a0f3375

  • SSDEEP

    12288:by901mBJSw/j1zmyMzPQOtMrLCfOaK1gmkQJZRhucHm0iDue7D5zRoAhXDyrf:bykEb1zPqPQvL7j+mkCjX/Be7D5FFTS

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      cb304900e55e096354696c56b40bf51722acd4ec00b6feeccf8d0f4cd2e23c85

    • Size

      695KB

    • MD5

      4803213ace367c4ae4906407f263fefd

    • SHA1

      669be67c184370f38361fb7835941c7605be4286

    • SHA256

      cb304900e55e096354696c56b40bf51722acd4ec00b6feeccf8d0f4cd2e23c85

    • SHA512

      c8aa44dd051059f85aa33d0b3dcde2994d377e2fc8cee5761bd7b7a2c1cf80ac6670d491d60d591f709ac6510b9a67d8d57ba4b150bf7a83b72e4b356a0f3375

    • SSDEEP

      12288:by901mBJSw/j1zmyMzPQOtMrLCfOaK1gmkQJZRhucHm0iDue7D5zRoAhXDyrf:bykEb1zPqPQvL7j+mkCjX/Be7D5FFTS

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks