Overview

overview

10

Static

static

3

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e5def6ceccb5cc1ef08637de6b2069de50cdfe78097e817455d4de24358bac1d

  • Size

    1.6MB

  • Sample

    231005-yj9y9sha42

  • MD5

    e8035f446773aa8b5ae6cae63ebda64c

  • SHA1

    7602ca772b180da050ff41e39c786997ab224ed8

  • SHA256

    e5def6ceccb5cc1ef08637de6b2069de50cdfe78097e817455d4de24358bac1d

  • SHA512

    7a675176fca4398e07456bfb30b9909e7179fb9120891d236c7f42a0e34114fa930f2dc4a913e173592287aa8bf9b430207caf92dd0f4c4d35d3e7e8a5d80fd2

  • SSDEEP

    24576:7yZjOcJEbjhYvVXZV3GlFv2VkvGlNjQX/NdjU0kJqsLRRQvr7F6aDP3U49A5BRSZ:uUCVXZFOvm2fw/YsYF6az+B4

Score
10/10
mysticpersistencestealer

Malware Config

Targets

    • Target

      e5def6ceccb5cc1ef08637de6b2069de50cdfe78097e817455d4de24358bac1d

    • Size

      1.6MB

    • MD5

      e8035f446773aa8b5ae6cae63ebda64c

    • SHA1

      7602ca772b180da050ff41e39c786997ab224ed8

    • SHA256

      e5def6ceccb5cc1ef08637de6b2069de50cdfe78097e817455d4de24358bac1d

    • SHA512

      7a675176fca4398e07456bfb30b9909e7179fb9120891d236c7f42a0e34114fa930f2dc4a913e173592287aa8bf9b430207caf92dd0f4c4d35d3e7e8a5d80fd2

    • SSDEEP

      24576:7yZjOcJEbjhYvVXZV3GlFv2VkvGlNjQX/NdjU0kJqsLRRQvr7F6aDP3U49A5BRSZ:uUCVXZFOvm2fw/YsYF6az+B4

    Score
    10/10
    mysticpersistencestealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks