Overview

overview

10

Static

static

3

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b0d4095c90043dc6470d367b2d96a206935543e9067422eb4674c3c0deb19ae7

  • Size

    1.1MB

  • Sample

    231002-k63ltage8z

  • MD5

    8534b3cfcf22dc0124fc90c1b2301586

  • SHA1

    df7f62e7c0305dec12e48cd87077e0d8f531fa00

  • SHA256

    b0d4095c90043dc6470d367b2d96a206935543e9067422eb4674c3c0deb19ae7

  • SHA512

    2af672bf21084791d56d980663f1af7ca61cb5b8a29c9663551af4797c758a2add4cc809682e8a3ab0ea563a3aff2a49681de6c4891b9fdb580a456d6c977ef2

  • SSDEEP

    24576:aytrTyqWk1+mrOMtCBiPSPo69g3l/BMuSnYK1fq8RsbiEV:htfLWk1+mr1ciUT0lBMuSz7w

Score
10/10
mysticpersistencestealer

Malware Config

Targets

    • Target

      b0d4095c90043dc6470d367b2d96a206935543e9067422eb4674c3c0deb19ae7

    • Size

      1.1MB

    • MD5

      8534b3cfcf22dc0124fc90c1b2301586

    • SHA1

      df7f62e7c0305dec12e48cd87077e0d8f531fa00

    • SHA256

      b0d4095c90043dc6470d367b2d96a206935543e9067422eb4674c3c0deb19ae7

    • SHA512

      2af672bf21084791d56d980663f1af7ca61cb5b8a29c9663551af4797c758a2add4cc809682e8a3ab0ea563a3aff2a49681de6c4891b9fdb580a456d6c977ef2

    • SSDEEP

      24576:aytrTyqWk1+mrOMtCBiPSPo69g3l/BMuSnYK1fq8RsbiEV:htfLWk1+mr1ciUT0lBMuSz7w

    Score
    10/10
    mysticpersistencestealer

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks