Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9f6a6832921256652a4d4c16f5bcc797c082322c294d4110f13b7b20fddf76dd

  • Size

    4.2MB

  • Sample

    230606-1cx28sgc91

  • MD5

    54bc489dd3bf5f3acc0c4fc7ccc9158d

  • SHA1

    174c82373d5b710febdf1f8b2961daf47570058f

  • SHA256

    9f6a6832921256652a4d4c16f5bcc797c082322c294d4110f13b7b20fddf76dd

  • SHA512

    fc5a6a8eef47ec332315728312689d05ddf4d7750a46cbd1cc05cfdebe6b43a5a89051caf8ac88036133d2689345cd0990c0624085f9e253fbb89c49580d3a87

  • SSDEEP

    98304:TCXgtvYrM88gRyaQy+erhrT7EEfw6+uo055wYcZL43PTwGGzCzUNE:TAAvYrcaQ4rh8r62Y8U3P09zrE

Score
10/10
gluptebadropperevasionloaderpersistence

Malware Config

Targets

    • Target

      9f6a6832921256652a4d4c16f5bcc797c082322c294d4110f13b7b20fddf76dd

    • Size

      4.2MB

    • MD5

      54bc489dd3bf5f3acc0c4fc7ccc9158d

    • SHA1

      174c82373d5b710febdf1f8b2961daf47570058f

    • SHA256

      9f6a6832921256652a4d4c16f5bcc797c082322c294d4110f13b7b20fddf76dd

    • SHA512

      fc5a6a8eef47ec332315728312689d05ddf4d7750a46cbd1cc05cfdebe6b43a5a89051caf8ac88036133d2689345cd0990c0624085f9e253fbb89c49580d3a87

    • SSDEEP

      98304:TCXgtvYrM88gRyaQy+erhrT7EEfw6+uo055wYcZL43PTwGGzCzUNE:TAAvYrcaQ4rh8r62Y8U3P09zrE

    Score
    10/10
    gluptebadropperevasionloaderpersistence

    • Glupteba

      Glupteba is a modular loader written in Golang with various components.

      loaderdropperglupteba

    • Glupteba payload

    • Modifies Windows Firewall

      evasion

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks