Overview

overview

10

Static

static

3

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    745b138811a4cc0d1294b8d9a5e4fbed5e9e5f5b4c80a8cfe967ca57251046f2

  • Size

    1.2MB

  • Sample

    231007-snrqlafg84

  • MD5

    00af0952d8854917ad7742a49297bbdf

  • SHA1

    33628bf051164195162771c5cf972e69833f5878

  • SHA256

    745b138811a4cc0d1294b8d9a5e4fbed5e9e5f5b4c80a8cfe967ca57251046f2

  • SHA512

    a95aba57049321ebf1ac317c736780d2428aaaa972f4a3be9baafbc1cfa8c04e99074feab1b93b77b4fc02d85162214d9f556d9df38954f826b5059623f0d73c

  • SSDEEP

    24576:EyMKj5oWNDRtZIaVKuCYYIipXRUi/FQEoHYCz9f4vQ:T9j5oWNDvpgIipXRttoH5Q

Score
10/10
mysticpersistencestealer

Malware Config

Targets

    • Target

      745b138811a4cc0d1294b8d9a5e4fbed5e9e5f5b4c80a8cfe967ca57251046f2

    • Size

      1.2MB

    • MD5

      00af0952d8854917ad7742a49297bbdf

    • SHA1

      33628bf051164195162771c5cf972e69833f5878

    • SHA256

      745b138811a4cc0d1294b8d9a5e4fbed5e9e5f5b4c80a8cfe967ca57251046f2

    • SHA512

      a95aba57049321ebf1ac317c736780d2428aaaa972f4a3be9baafbc1cfa8c04e99074feab1b93b77b4fc02d85162214d9f556d9df38954f826b5059623f0d73c

    • SSDEEP

      24576:EyMKj5oWNDRtZIaVKuCYYIipXRUi/FQEoHYCz9f4vQ:T9j5oWNDvpgIipXRttoH5Q

    Score
    10/10
    mysticpersistencestealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks