Overview

overview

7

Static

static

3

dridex

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bf8ae50fedbd34cd8a424662fb8a25b8183281c491bc45d91780fcf369c0ed17

  • Size

    207KB

  • Sample

    230608-gpxsfscg87

  • MD5

    c9ed4800ebd83470018b5779de6c8bd9

  • SHA1

    842318f779c3e3407ffa3b7b6f8be36a6be76926

  • SHA256

    bf8ae50fedbd34cd8a424662fb8a25b8183281c491bc45d91780fcf369c0ed17

  • SHA512

    0e6736aa32570270b283622e946f73b5baf3264f3766756c01da02da78e06d988fb7ea290b49e162cd0c11799f5a8a4e81119f4b5e00c0323c0ad83392809c12

  • SSDEEP

    3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij

Score
7/10

Malware Config

Targets

    • Target

      bf8ae50fedbd34cd8a424662fb8a25b8183281c491bc45d91780fcf369c0ed17

    • Size

      207KB

    • MD5

      c9ed4800ebd83470018b5779de6c8bd9

    • SHA1

      842318f779c3e3407ffa3b7b6f8be36a6be76926

    • SHA256

      bf8ae50fedbd34cd8a424662fb8a25b8183281c491bc45d91780fcf369c0ed17

    • SHA512

      0e6736aa32570270b283622e946f73b5baf3264f3766756c01da02da78e06d988fb7ea290b49e162cd0c11799f5a8a4e81119f4b5e00c0323c0ad83392809c12

    • SSDEEP

      3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks