Overview

overview

10

Static

static

3

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e753b92e45820bd4ea42e64cb76052ee90c2a8e99883e8210bb6c46d470a8bab

  • Size

    723KB

  • Sample

    230607-xh3ccsee68

  • MD5

    b4e740555bfb46ac041ac43c34fc53a3

  • SHA1

    6fd875df4ea7955efbb0b9b1391656b8809883be

  • SHA256

    e753b92e45820bd4ea42e64cb76052ee90c2a8e99883e8210bb6c46d470a8bab

  • SHA512

    8106c3af2db364fec4a176decbf4b2bf28e36e78fd8ee1eea9c5031d9dc5568ccd7a93b9329454f1f67ae4951735e30b84a588d78ef8b66b680fd1065ef63f5b

  • SSDEEP

    12288:RMrxy909z0XCrVW2laJKgQ6/v0KJwRgWRhWYDg4XhsmTylVEBYBhppILW:Ay4x7ADps+wFTLym6VEkl

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      e753b92e45820bd4ea42e64cb76052ee90c2a8e99883e8210bb6c46d470a8bab

    • Size

      723KB

    • MD5

      b4e740555bfb46ac041ac43c34fc53a3

    • SHA1

      6fd875df4ea7955efbb0b9b1391656b8809883be

    • SHA256

      e753b92e45820bd4ea42e64cb76052ee90c2a8e99883e8210bb6c46d470a8bab

    • SHA512

      8106c3af2db364fec4a176decbf4b2bf28e36e78fd8ee1eea9c5031d9dc5568ccd7a93b9329454f1f67ae4951735e30b84a588d78ef8b66b680fd1065ef63f5b

    • SSDEEP

      12288:RMrxy909z0XCrVW2laJKgQ6/v0KJwRgWRhWYDg4XhsmTylVEBYBhppILW:Ay4x7ADps+wFTLym6VEkl

    Score
    10/10
    evasionpersistencetrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks