Overview

overview

7

Static

static

1

dridex

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    95f47af1a69cb5ee8b7a85ff7e17901819813f7d2035bec40a73d2c8f76540c8

  • Size

    1.7MB

  • Sample

    230505-krtelaba41

  • MD5

    eb85c562249e96d7a946111241f0ea4b

  • SHA1

    5c89db5dad53c26ec1f8189261a7fc4eace18773

  • SHA256

    95f47af1a69cb5ee8b7a85ff7e17901819813f7d2035bec40a73d2c8f76540c8

  • SHA512

    ee193460fc300d57bee2a57794bebfe7edbf22a72764faf42a8e8dd90f65603058e511f51f4a2aab7342febbe9a054c49c8d55eb5c6cd09fb3b983040ac84f77

  • SSDEEP

    49152:EWixii6vjHOwOfx8GekJixPPfNKE7Kpr4C4zOowhsJ4cNL:ixaCwrxPQKdqo4cB

Score
7/10
persistence

Malware Config

Targets

    • Target

      95f47af1a69cb5ee8b7a85ff7e17901819813f7d2035bec40a73d2c8f76540c8

    • Size

      1.7MB

    • MD5

      eb85c562249e96d7a946111241f0ea4b

    • SHA1

      5c89db5dad53c26ec1f8189261a7fc4eace18773

    • SHA256

      95f47af1a69cb5ee8b7a85ff7e17901819813f7d2035bec40a73d2c8f76540c8

    • SHA512

      ee193460fc300d57bee2a57794bebfe7edbf22a72764faf42a8e8dd90f65603058e511f51f4a2aab7342febbe9a054c49c8d55eb5c6cd09fb3b983040ac84f77

    • SSDEEP

      49152:EWixii6vjHOwOfx8GekJixPPfNKE7Kpr4C4zOowhsJ4cNL:ixaCwrxPQKdqo4cB

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks