Overview

overview

10

Static

static

3

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4895fbbe1bf07fb091ac345d5cda85cd9ec92354b196c2a431630dee4d5d3f12

  • Size

    651KB

  • Sample

    230426-yxeqaabf42

  • MD5

    82c2806fbe0659a955d68a8627b69d4d

  • SHA1

    2eb653a3905eeb07355d6d7c5bcfe63f5853b99b

  • SHA256

    4895fbbe1bf07fb091ac345d5cda85cd9ec92354b196c2a431630dee4d5d3f12

  • SHA512

    4bb6d15d71948e504699562289b461949087b6d73dbce81649900c14d6a243dc0f8e91df38a8812564de0ed668cb83274f467823d527d1e004032e0142256863

  • SSDEEP

    12288:9y90OI52JfDls5DEFRJ3ivutPJfN7ijPSGgnKN9NMBKoNLmkSJrvG3DaCgJL:9yQ2J65gJ3iv6PJV2jP5NYKcwJDAuL

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      4895fbbe1bf07fb091ac345d5cda85cd9ec92354b196c2a431630dee4d5d3f12

    • Size

      651KB

    • MD5

      82c2806fbe0659a955d68a8627b69d4d

    • SHA1

      2eb653a3905eeb07355d6d7c5bcfe63f5853b99b

    • SHA256

      4895fbbe1bf07fb091ac345d5cda85cd9ec92354b196c2a431630dee4d5d3f12

    • SHA512

      4bb6d15d71948e504699562289b461949087b6d73dbce81649900c14d6a243dc0f8e91df38a8812564de0ed668cb83274f467823d527d1e004032e0142256863

    • SSDEEP

      12288:9y90OI52JfDls5DEFRJ3ivutPJfN7ijPSGgnKN9NMBKoNLmkSJrvG3DaCgJL:9yQ2J65gJ3iv6PJV2jP5NYKcwJDAuL

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks