Overview

overview

7

Static

static

3

dridex

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    76de16b596ad3700130d2d2c02a9ca144ace99bef78a7088b93f069673cbe972

  • Size

    846KB

  • Sample

    230822-jmmktacc5y

  • MD5

    114447fa6f663aed141feeb4dc72f9fa

  • SHA1

    ae13f7f1caabe308e65eced72be6a11896ba6fa3

  • SHA256

    76de16b596ad3700130d2d2c02a9ca144ace99bef78a7088b93f069673cbe972

  • SHA512

    0916f065f5ae1cdbd55232d8c821985cae44acfc3402073976cbf188bcc9fff57a1f9296ba64905b1f5569c1bcd7476ee1c05e6eccca14c6e6b421ad64818a5f

  • SSDEEP

    12288:4UVv25w+mBmtN2d1mbTLYLAe/LYWuB2xmiwQZ/+t7Qk61Nh8CTAKOr1XqsWS62:4dmB4FLYEg81Axmiwy/+tf67qXLWS5

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      76de16b596ad3700130d2d2c02a9ca144ace99bef78a7088b93f069673cbe972

    • Size

      846KB

    • MD5

      114447fa6f663aed141feeb4dc72f9fa

    • SHA1

      ae13f7f1caabe308e65eced72be6a11896ba6fa3

    • SHA256

      76de16b596ad3700130d2d2c02a9ca144ace99bef78a7088b93f069673cbe972

    • SHA512

      0916f065f5ae1cdbd55232d8c821985cae44acfc3402073976cbf188bcc9fff57a1f9296ba64905b1f5569c1bcd7476ee1c05e6eccca14c6e6b421ad64818a5f

    • SSDEEP

      12288:4UVv25w+mBmtN2d1mbTLYLAe/LYWuB2xmiwQZ/+t7Qk61Nh8CTAKOr1XqsWS62:4dmB4FLYEg81Axmiwy/+tf67qXLWS5

    Score
    7/10
    spywarestealer

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

      spywarestealer

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks