Overview

overview

10

Static

static

3

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2eac74a61c0f10bc81129f49307e4bb798fe78a8906bc7f81def4d6a6d1ab4ea

  • Size

    371KB

  • Sample

    231112-qnbm9sgb8x

  • MD5

    f1503836fc8d404dd4c8dc177601629c

  • SHA1

    c7f660b3c4af41af7610339358d32eb0df6eeb6d

  • SHA256

    2eac74a61c0f10bc81129f49307e4bb798fe78a8906bc7f81def4d6a6d1ab4ea

  • SHA512

    95da6be83dedbc678e840832ab32345ecb19ce99b07a4101da26545d23055f996ca074fc60fdb7e7f86a43e04628b9d58cb697f5c7c403368e4b490a09994fd3

  • SSDEEP

    6144:Kwy+bnr+Bp0yN90QE87cXIngFUxx5sXvw2GbNe6XC8FUIpaN+1ylYr:EMrNy904gMgFGx5s/wHbNec5FUB+1cq

Score
10/10
mysticpersistencestealer

Malware Config

Targets

    • Target

      2eac74a61c0f10bc81129f49307e4bb798fe78a8906bc7f81def4d6a6d1ab4ea

    • Size

      371KB

    • MD5

      f1503836fc8d404dd4c8dc177601629c

    • SHA1

      c7f660b3c4af41af7610339358d32eb0df6eeb6d

    • SHA256

      2eac74a61c0f10bc81129f49307e4bb798fe78a8906bc7f81def4d6a6d1ab4ea

    • SHA512

      95da6be83dedbc678e840832ab32345ecb19ce99b07a4101da26545d23055f996ca074fc60fdb7e7f86a43e04628b9d58cb697f5c7c403368e4b490a09994fd3

    • SSDEEP

      6144:Kwy+bnr+Bp0yN90QE87cXIngFUxx5sXvw2GbNe6XC8FUIpaN+1ylYr:EMrNy904gMgFGx5s/wHbNec5FUB+1cq

    Score
    10/10
    mysticpersistencestealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks