Overview

overview

7

Static

static

3

dridex

windows10-1703-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    e3d7b1ecf8045bd378cfa746283cf76b9f49725625f239d8a321d58792651d77

  • Size

    1.1MB

  • Sample

    230504-tg553sfd7x

  • MD5

    d89d1d4f78cf5f7917f3da70a8cf7def

  • SHA1

    e4157c781581d762a3167d9248a38139569ae838

  • SHA256

    e3d7b1ecf8045bd378cfa746283cf76b9f49725625f239d8a321d58792651d77

  • SHA512

    d020a8120532dbadc9b30ac714153606672166e289215f193e86b62ec5696b8a0fce8fe664cc994bd5fb1bbe895778110d511409c5de3bae648d7cdb6dc6ccee

  • SSDEEP

    24576:hyYEuyexhit+pjYcGMMkjPFWMblpuvwdYTFB/yThfpo:UYEuDgfcAAvbf+9FB/yR

Score
7/10
discoverypersistencespywarestealer

Malware Config

Targets

    • Target

      e3d7b1ecf8045bd378cfa746283cf76b9f49725625f239d8a321d58792651d77

    • Size

      1.1MB

    • MD5

      d89d1d4f78cf5f7917f3da70a8cf7def

    • SHA1

      e4157c781581d762a3167d9248a38139569ae838

    • SHA256

      e3d7b1ecf8045bd378cfa746283cf76b9f49725625f239d8a321d58792651d77

    • SHA512

      d020a8120532dbadc9b30ac714153606672166e289215f193e86b62ec5696b8a0fce8fe664cc994bd5fb1bbe895778110d511409c5de3bae648d7cdb6dc6ccee

    • SSDEEP

      24576:hyYEuyexhit+pjYcGMMkjPFWMblpuvwdYTFB/yThfpo:UYEuDgfcAAvbf+9FB/yR

    Score
    7/10
    discoverypersistencespywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks