Overview

overview

10

Static

static

3

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2eeb5813bcefb62b20b1431ef85d44be708b89beeaafbff2c4b36e2913afcb4e

  • Size

    1.3MB

  • Sample

    231113-vxczxaef95

  • MD5

    73d5dd5ced2905ef76857df18511fa9f

  • SHA1

    984f3a1e5cedc0c26acdca22d62e9ce68acb5bdb

  • SHA256

    2eeb5813bcefb62b20b1431ef85d44be708b89beeaafbff2c4b36e2913afcb4e

  • SHA512

    84103291f9680b11a4ea57cdda8a23d6519eb0b0642a979543d005c19b1c577a1cd91df45f6dd72efbbf8d71940230423e9759c78cffb674027c994bab013597

  • SSDEEP

    24576:HywMMxgDQw3Aa9mSPdNiqeE6p3doUlvtmgScQGJY/hmlewhBLuI0xXxC8/lzO:SwScw3ASHFNiqG3C+tmgfHKhWT0xXxCa

Score
10/10
mysticpersistencestealer

Malware Config

Targets

    • Target

      2eeb5813bcefb62b20b1431ef85d44be708b89beeaafbff2c4b36e2913afcb4e

    • Size

      1.3MB

    • MD5

      73d5dd5ced2905ef76857df18511fa9f

    • SHA1

      984f3a1e5cedc0c26acdca22d62e9ce68acb5bdb

    • SHA256

      2eeb5813bcefb62b20b1431ef85d44be708b89beeaafbff2c4b36e2913afcb4e

    • SHA512

      84103291f9680b11a4ea57cdda8a23d6519eb0b0642a979543d005c19b1c577a1cd91df45f6dd72efbbf8d71940230423e9759c78cffb674027c994bab013597

    • SSDEEP

      24576:HywMMxgDQw3Aa9mSPdNiqeE6p3doUlvtmgScQGJY/hmlewhBLuI0xXxC8/lzO:SwScw3ASHFNiqG3C+tmgfHKhWT0xXxCa

    Score
    10/10
    mysticpersistencestealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks