Overview

overview

8

Static

static

3

dridex

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    60ba10a5bdafa65987f36aa9ba884f686e36788bea22a7f6a7026fa18cbbab1d

  • Size

    26KB

  • Sample

    230922-vl4y9abc89

  • MD5

    751f30fc1993b036c41fd04da011f3f9

  • SHA1

    8fc886fdd7e08c0f0a0600f74d596409872adad8

  • SHA256

    60ba10a5bdafa65987f36aa9ba884f686e36788bea22a7f6a7026fa18cbbab1d

  • SHA512

    90b6da7e07b66a6cf1723d4b8246f78280451f83851a66d53da3158bca9e61f531f6eff6671efba586599771fbbfca387bfb213751f170ac90d9a9e1a822cb83

  • SSDEEP

    384:bJJo2hYvWMUMGYZakk1RZxVTcK93MTW4g1CwL1+b+/cG7m3MXhJD0m3Htp:UEHHTZrTv3M41v1+bpCrXhJgm3Htp

Score
8/10
spywarestealer

Malware Config

Targets

    • Target

      60ba10a5bdafa65987f36aa9ba884f686e36788bea22a7f6a7026fa18cbbab1d

    • Size

      26KB

    • MD5

      751f30fc1993b036c41fd04da011f3f9

    • SHA1

      8fc886fdd7e08c0f0a0600f74d596409872adad8

    • SHA256

      60ba10a5bdafa65987f36aa9ba884f686e36788bea22a7f6a7026fa18cbbab1d

    • SHA512

      90b6da7e07b66a6cf1723d4b8246f78280451f83851a66d53da3158bca9e61f531f6eff6671efba586599771fbbfca387bfb213751f170ac90d9a9e1a822cb83

    • SSDEEP

      384:bJJo2hYvWMUMGYZakk1RZxVTcK93MTW4g1CwL1+b+/cG7m3MXhJD0m3Htp:UEHHTZrTv3M41v1+bpCrXhJgm3Htp

    Score
    8/10
    spywarestealer

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks