Overview

overview

7

Static

static

3

dridex

windows10-1703-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    e057301d8ed441cae57324e5f1f1a64c5fb1b7cd7b35a3c50d8d57fa206c0c04

  • Size

    5.6MB

  • Sample

    231104-jxan1add51

  • MD5

    2c7755ecc049717411e015d33353c7cc

  • SHA1

    604bb5e1d0e2c65d54693bb177aa8cc4cb926386

  • SHA256

    e057301d8ed441cae57324e5f1f1a64c5fb1b7cd7b35a3c50d8d57fa206c0c04

  • SHA512

    129442ebad7011e9202c60d59b2696f68b2025639a25f7c1bc2b269b68d3c8db5111c5894a4675b6aa4d2d726030d5307b0af8068e63efe27d566b0e02b04462

  • SSDEEP

    98304:MiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:dRm1syxacY48eda2TMpQdZ9nc+fyhNjG

Score
7/10
discovery

Malware Config

Targets

    • Target

      e057301d8ed441cae57324e5f1f1a64c5fb1b7cd7b35a3c50d8d57fa206c0c04

    • Size

      5.6MB

    • MD5

      2c7755ecc049717411e015d33353c7cc

    • SHA1

      604bb5e1d0e2c65d54693bb177aa8cc4cb926386

    • SHA256

      e057301d8ed441cae57324e5f1f1a64c5fb1b7cd7b35a3c50d8d57fa206c0c04

    • SHA512

      129442ebad7011e9202c60d59b2696f68b2025639a25f7c1bc2b269b68d3c8db5111c5894a4675b6aa4d2d726030d5307b0af8068e63efe27d566b0e02b04462

    • SSDEEP

      98304:MiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:dRm1syxacY48eda2TMpQdZ9nc+fyhNjG

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks