7c8e0085f5b4096f6bcf41d685dfacc111592ff1012359ca14ddde0f86071846 | Triage

Submit
Reports

Overview

overview

Static

static

3

dridex

windows10-1703-x64

Sharing

General

Target

7c8e0085f5b4096f6bcf41d685dfacc111592ff1012359ca14ddde0f86071846
Size

1.4MB
Sample

230731-1ezc3scd3w
MD5

9cb79202ffeebec360569b4919191941
SHA1

30af54735d821b77be2b2bdfe9d5068443a3a663
SHA256

7c8e0085f5b4096f6bcf41d685dfacc111592ff1012359ca14ddde0f86071846
SHA512

07a18c9fe06b604e7257c63adde73f584c6a38aa4dac522f3db39e5bbe483962ef9a7ddb5274fe8c63173fd6d0910b5b42edc5f0eaabbc28777b0818ea406511
SSDEEP

24576:U2G/nvxW3Ww0tRp8GiXTBhq7yRDvHcUcjUvy0lr3Tl6icOB/UWoT:UbA30H4zF0UMSAicOB/UWk

Score

10^/10

evasion persistence upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

7c8e0085f5b4096f6bcf41d685dfacc111592ff1012359ca14ddde0f86071846.exe

Resource

win10-20230703-en

evasion persistence upx

windows10-1703-x64

14 signatures

150 seconds

Malware Config

Targets

- Target
  
  7c8e0085f5b4096f6bcf41d685dfacc111592ff1012359ca14ddde0f86071846
- Size
  
  1.4MB
- MD5
  
  9cb79202ffeebec360569b4919191941
- SHA1
  
  30af54735d821b77be2b2bdfe9d5068443a3a663
- SHA256
  
  7c8e0085f5b4096f6bcf41d685dfacc111592ff1012359ca14ddde0f86071846
- SHA512
  
  07a18c9fe06b604e7257c63adde73f584c6a38aa4dac522f3db39e5bbe483962ef9a7ddb5274fe8c63173fd6d0910b5b42edc5f0eaabbc28777b0818ea406511
- SSDEEP
  
  24576:U2G/nvxW3Ww0tRp8GiXTBhq7yRDvHcUcjUvy0lr3Tl6icOB/UWoT:UbA30H4zF0UMSAicOB/UWk
Score

10^/10

evasion persistence upx
- Modifies WinLogon for persistence
  persistence
- Modifies Windows Firewall
  evasion
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Unexpected DNS network traffic destination
  Network traffic to other servers than the configured DNS servers was detected on the DNS port.
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Create or Modify System Process

Windows Service

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceupx

© 2018-2025

Terms | Privacy