Overview

overview

10

Static

static

3

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    960369b2e034c67cd7bf502f9320effa392f74444faccf1e24a0d2a286c811ab

  • Size

    1.2MB

  • Sample

    231007-a8869sgf2t

  • MD5

    ed92b43e09b26e1ef6c034da827cff47

  • SHA1

    764dc2998d4b98f06893c4a3198818bf520b4ac6

  • SHA256

    960369b2e034c67cd7bf502f9320effa392f74444faccf1e24a0d2a286c811ab

  • SHA512

    bd186784bd0b7d6c55f7795017f9f8e17c69aa7793a637d5d7ae5c03c8233e4d69243f243c5fd1fbcb98687825187fd8e183412e968f30735a1b4df5f18b726c

  • SSDEEP

    24576:lyh//8M8D9M2XKJQpc+6n47uKBQOcqfpyG8AwVLEq:ANm7XYQW6uKBxvQGh+E

Score
10/10
mysticpersistencestealer

Malware Config

Targets

    • Target

      960369b2e034c67cd7bf502f9320effa392f74444faccf1e24a0d2a286c811ab

    • Size

      1.2MB

    • MD5

      ed92b43e09b26e1ef6c034da827cff47

    • SHA1

      764dc2998d4b98f06893c4a3198818bf520b4ac6

    • SHA256

      960369b2e034c67cd7bf502f9320effa392f74444faccf1e24a0d2a286c811ab

    • SHA512

      bd186784bd0b7d6c55f7795017f9f8e17c69aa7793a637d5d7ae5c03c8233e4d69243f243c5fd1fbcb98687825187fd8e183412e968f30735a1b4df5f18b726c

    • SSDEEP

      24576:lyh//8M8D9M2XKJQpc+6n47uKBQOcqfpyG8AwVLEq:ANm7XYQW6uKBxvQGh+E

    Score
    10/10
    mysticpersistencestealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks