Overview

overview

7

Static

static

3

dridex

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fe769c40bdc4ba83422c97df176374bb3846f4cc941ecbbfb47383321dfabdca

  • Size

    265KB

  • Sample

    230428-egdy9sde4t

  • MD5

    f30050237e1e4b07f13d8b4e4ecf8209

  • SHA1

    c80a5cd767b304e9cd89ca8bbfe30b812e02ec14

  • SHA256

    fe769c40bdc4ba83422c97df176374bb3846f4cc941ecbbfb47383321dfabdca

  • SHA512

    14f145246a8962bec55e36871493a231753bd504c496e5f2e802e464f44688dd5a8f88aeb5c9b29db7ef311c9cc85c4136291f9b61fc449a102d5e4118b4a7d7

  • SSDEEP

    6144:vYa6fBRHeTlVyI+pw0KjKtBO6jV82T4YCzjVTPkWTBp5d6:vYdBRYygjW46jVtCtXdpe

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      fe769c40bdc4ba83422c97df176374bb3846f4cc941ecbbfb47383321dfabdca

    • Size

      265KB

    • MD5

      f30050237e1e4b07f13d8b4e4ecf8209

    • SHA1

      c80a5cd767b304e9cd89ca8bbfe30b812e02ec14

    • SHA256

      fe769c40bdc4ba83422c97df176374bb3846f4cc941ecbbfb47383321dfabdca

    • SHA512

      14f145246a8962bec55e36871493a231753bd504c496e5f2e802e464f44688dd5a8f88aeb5c9b29db7ef311c9cc85c4136291f9b61fc449a102d5e4118b4a7d7

    • SSDEEP

      6144:vYa6fBRHeTlVyI+pw0KjKtBO6jV82T4YCzjVTPkWTBp5d6:vYdBRYygjW46jVtCtXdpe

    Score
    7/10
    spywarestealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks