Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ecdf7b64c77d168ff6fa6bcc681909f0dfa8bc5f05071a46b1802bfc227a9c4e

  • Size

    4.1MB

  • Sample

    231011-s4k8ragd8w

  • MD5

    9dd48f5e9011f5a0e1e09d2aeb51ddfd

  • SHA1

    788325b2bbefd95a9fcd982f47efe0cac9266f74

  • SHA256

    ecdf7b64c77d168ff6fa6bcc681909f0dfa8bc5f05071a46b1802bfc227a9c4e

  • SHA512

    4681ec0c91a5876acb7b7210ea293d757aa606ffa7bee35a7475b2ac9735058d656f02dee442dfc77e1c692392356ac8f7ff7bd3cfd809faf5c8c3c38e1b80fc

  • SSDEEP

    98304:rbZwNMOyYTaUs7+TVUsw2NKTL6Pa2dsUNG4:R6zyxMU72NaLerk4

Score
10/10
gluptebadropperevasionloaderpersistence

Malware Config

Targets

    • Target

      ecdf7b64c77d168ff6fa6bcc681909f0dfa8bc5f05071a46b1802bfc227a9c4e

    • Size

      4.1MB

    • MD5

      9dd48f5e9011f5a0e1e09d2aeb51ddfd

    • SHA1

      788325b2bbefd95a9fcd982f47efe0cac9266f74

    • SHA256

      ecdf7b64c77d168ff6fa6bcc681909f0dfa8bc5f05071a46b1802bfc227a9c4e

    • SHA512

      4681ec0c91a5876acb7b7210ea293d757aa606ffa7bee35a7475b2ac9735058d656f02dee442dfc77e1c692392356ac8f7ff7bd3cfd809faf5c8c3c38e1b80fc

    • SSDEEP

      98304:rbZwNMOyYTaUs7+TVUsw2NKTL6Pa2dsUNG4:R6zyxMU72NaLerk4

    Score
    10/10
    gluptebadropperevasionloaderpersistence

    • Glupteba

      Glupteba is a modular loader written in Golang with various components.

      loaderdropperglupteba

    • Glupteba payload

    • Modifies Windows Firewall

      evasion

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks