Overview

overview

10

Static

static

3

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c37e0b650b1fc729121f99e7ee39deb2cbb4141adb1cef93970e8bf3681fb02e

  • Size

    480KB

  • Sample

    230505-x3nppsgh93

  • MD5

    efedbef8fd0a9328985db081dec4074e

  • SHA1

    eca68e706d71e0295d42859c0764d4b171ace314

  • SHA256

    c37e0b650b1fc729121f99e7ee39deb2cbb4141adb1cef93970e8bf3681fb02e

  • SHA512

    52cd7ced04b782042e72663fbca4788f41708d8cf149941405355ebc2dc8bf8689d8fcda97ff082fa780a37cb29aa7e4eb40f3178e907bdceb607d238ee1d23e

  • SSDEEP

    12288:4Mrky90qmxwYe05FG4P+YvmA/WvcyBgth4:8yLX4P+mm0yKth4

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      c37e0b650b1fc729121f99e7ee39deb2cbb4141adb1cef93970e8bf3681fb02e

    • Size

      480KB

    • MD5

      efedbef8fd0a9328985db081dec4074e

    • SHA1

      eca68e706d71e0295d42859c0764d4b171ace314

    • SHA256

      c37e0b650b1fc729121f99e7ee39deb2cbb4141adb1cef93970e8bf3681fb02e

    • SHA512

      52cd7ced04b782042e72663fbca4788f41708d8cf149941405355ebc2dc8bf8689d8fcda97ff082fa780a37cb29aa7e4eb40f3178e907bdceb607d238ee1d23e

    • SSDEEP

      12288:4Mrky90qmxwYe05FG4P+YvmA/WvcyBgth4:8yLX4P+mm0yKth4

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks