Overview

overview

10

Static

static

3

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5df82a2cbc00d2b5f2075a40eadd4e006569ffc96bf8eb597d7bdd366406e52b

  • Size

    1.8MB

  • Sample

    230511-sgxm9seb59

  • MD5

    fe415fe7497faeb1c84614d9a267b2eb

  • SHA1

    a1e98c7779a5c399cd866226bd668e255dd7f346

  • SHA256

    5df82a2cbc00d2b5f2075a40eadd4e006569ffc96bf8eb597d7bdd366406e52b

  • SHA512

    a02d6c94346fa9cca5f224ca5ce3aebcde4599bf650bd9877111bb9511c7e8f965f58f921b6b60567e80ee2a3c726726c0d1d3d7e9d70838903dce45d1a5ab46

  • SSDEEP

    49152:FsRXycULLv5AJOzWwKKswtrw2FZZytLJ917OFbH3Ck:FsRCcULLRiwPbM2vZytLvIHyk

Score
10/10
collectionupx

Malware Config

Targets

    • Target

      5df82a2cbc00d2b5f2075a40eadd4e006569ffc96bf8eb597d7bdd366406e52b

    • Size

      1.8MB

    • MD5

      fe415fe7497faeb1c84614d9a267b2eb

    • SHA1

      a1e98c7779a5c399cd866226bd668e255dd7f346

    • SHA256

      5df82a2cbc00d2b5f2075a40eadd4e006569ffc96bf8eb597d7bdd366406e52b

    • SHA512

      a02d6c94346fa9cca5f224ca5ce3aebcde4599bf650bd9877111bb9511c7e8f965f58f921b6b60567e80ee2a3c726726c0d1d3d7e9d70838903dce45d1a5ab46

    • SSDEEP

      49152:FsRXycULLv5AJOzWwKKswtrw2FZZytLJ917OFbH3Ck:FsRCcULLRiwPbM2vZytLvIHyk

    Score
    10/10
    collectionupx

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Accesses Microsoft Outlook profiles

      collection

    • Drops desktop.ini file(s)

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks