Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    cf722de9fa10d2bd88e49d16ca0518a76829f34cfce2020da4ae7cf63c3a2dd0

  • Size

    4.1MB

  • Sample

    231011-jhthkaab3x

  • MD5

    dbcba847d19a80ec6b7617065de489be

  • SHA1

    c98a8b8be1c213f5fbf99f8e90b948a07eed6aa3

  • SHA256

    cf722de9fa10d2bd88e49d16ca0518a76829f34cfce2020da4ae7cf63c3a2dd0

  • SHA512

    3a2d14a2789ed5c9016e3a2ff8be82d72eba4a31aa24897edadffe6a5daf10056f84b400d72bf8044db6b34e0ba296b5adb4a2c2f048189c8b3d5dee0bddcc09

  • SSDEEP

    98304:t6kgPXrnj7pDKwxOJfg0HzNjlNlz+ZwVCpwi5XlbrScpsVXX32W:ULzn/pDnwfZrH+yVUJmDVGW

Score
10/10
gluptebadropperevasionloaderupx

Malware Config

Targets

    • Target

      cf722de9fa10d2bd88e49d16ca0518a76829f34cfce2020da4ae7cf63c3a2dd0

    • Size

      4.1MB

    • MD5

      dbcba847d19a80ec6b7617065de489be

    • SHA1

      c98a8b8be1c213f5fbf99f8e90b948a07eed6aa3

    • SHA256

      cf722de9fa10d2bd88e49d16ca0518a76829f34cfce2020da4ae7cf63c3a2dd0

    • SHA512

      3a2d14a2789ed5c9016e3a2ff8be82d72eba4a31aa24897edadffe6a5daf10056f84b400d72bf8044db6b34e0ba296b5adb4a2c2f048189c8b3d5dee0bddcc09

    • SSDEEP

      98304:t6kgPXrnj7pDKwxOJfg0HzNjlNlz+ZwVCpwi5XlbrScpsVXX32W:ULzn/pDnwfZrH+yVUJmDVGW

    Score
    10/10
    gluptebadropperevasionloaderupx

    • Glupteba

      Glupteba is a modular loader written in Golang with various components.

      loaderdropperglupteba

    • Glupteba payload

    • Modifies Windows Firewall

      evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks