Overview

overview

8

Static

static

3

dridex

windows10-1703-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    fb75534b9bb2010fdcb813e36f95e5516c3dc3f8dca1ab74ab9f3d64c345b62b

  • Size

    1.4MB

  • Sample

    230801-l875rafb48

  • MD5

    2387b7c16e989235ca80c37e8b8130b5

  • SHA1

    688e270bdd150462ba1ae1dcedafe80018a2def9

  • SHA256

    fb75534b9bb2010fdcb813e36f95e5516c3dc3f8dca1ab74ab9f3d64c345b62b

  • SHA512

    c4bc0e66602b0c0661c777dbe25a9bb19e3b3089271b973414b1912c1d55ded47f1007c569d9c7d18d7bd2caac1fb31b5f8b3a3972fcf4a66fd41af2272ea1e6

  • SSDEEP

    24576:U2G/nvxW3Ww0tRp8GiXTBhq7yRDvHcUcjUvy0lr3Tl6icOB/UWoT:UbA30H4zF0UMSAicOB/UWk

Score
8/10
evasionupx

Malware Config

Targets

    • Target

      fb75534b9bb2010fdcb813e36f95e5516c3dc3f8dca1ab74ab9f3d64c345b62b

    • Size

      1.4MB

    • MD5

      2387b7c16e989235ca80c37e8b8130b5

    • SHA1

      688e270bdd150462ba1ae1dcedafe80018a2def9

    • SHA256

      fb75534b9bb2010fdcb813e36f95e5516c3dc3f8dca1ab74ab9f3d64c345b62b

    • SHA512

      c4bc0e66602b0c0661c777dbe25a9bb19e3b3089271b973414b1912c1d55ded47f1007c569d9c7d18d7bd2caac1fb31b5f8b3a3972fcf4a66fd41af2272ea1e6

    • SSDEEP

      24576:U2G/nvxW3Ww0tRp8GiXTBhq7yRDvHcUcjUvy0lr3Tl6icOB/UWoT:UbA30H4zF0UMSAicOB/UWk

    Score
    8/10
    evasionupx

    • Modifies Windows Firewall

      evasion

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks