Overview

overview

10

Static

static

3

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5ce3576ea4b31ef2b13272786d51743ef19ce5fb10c5e0e02e31b2bb9111d2a3

  • Size

    1.2MB

  • Sample

    231006-rrbccaeh56

  • MD5

    2957ad122bfcfbecf4a5ac8144752345

  • SHA1

    b43f22ef9d9ceda2343568a3d6df6edba89ae421

  • SHA256

    5ce3576ea4b31ef2b13272786d51743ef19ce5fb10c5e0e02e31b2bb9111d2a3

  • SHA512

    b22f5673f11b16dc78f4547659cb5a4e5b6dd6e195dafdaf597de733d87c53cb7cd7382dc4e401535ef51b796730d69c15f5fb9bb6d148893dc27197912589da

  • SSDEEP

    24576:oyz9ofMju4b21rRGmmd1A2fTgIi+Wnc2L/qwNnOCN4:vmf0u4bOnmd1A2WOWywNn

Score
10/10
mysticpersistencestealer

Malware Config

Targets

    • Target

      5ce3576ea4b31ef2b13272786d51743ef19ce5fb10c5e0e02e31b2bb9111d2a3

    • Size

      1.2MB

    • MD5

      2957ad122bfcfbecf4a5ac8144752345

    • SHA1

      b43f22ef9d9ceda2343568a3d6df6edba89ae421

    • SHA256

      5ce3576ea4b31ef2b13272786d51743ef19ce5fb10c5e0e02e31b2bb9111d2a3

    • SHA512

      b22f5673f11b16dc78f4547659cb5a4e5b6dd6e195dafdaf597de733d87c53cb7cd7382dc4e401535ef51b796730d69c15f5fb9bb6d148893dc27197912589da

    • SSDEEP

      24576:oyz9ofMju4b21rRGmmd1A2fTgIi+Wnc2L/qwNnOCN4:vmf0u4bOnmd1A2WOWywNn

    Score
    10/10
    mysticpersistencestealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks