Overview

overview

10

Static

static

3

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    de0645a844faf35efae106a5eded7e6ac55077e6e2b8627f493014b106439c39

  • Size

    1.2MB

  • Sample

    231113-zvfp8seh81

  • MD5

    40fd33049bda52f89908650de8958d4f

  • SHA1

    49e4ae354f0cd4e04dadb26450f98c562ea05a5b

  • SHA256

    de0645a844faf35efae106a5eded7e6ac55077e6e2b8627f493014b106439c39

  • SHA512

    ea77fb8e265e787cf0d4768bcbf4cf7bccea32e683840f0729bbd541ecf1251f428a9a63a910462a7f85966376480057bbf69323383c977b7544f7c49ddeb0be

  • SSDEEP

    24576:cyA+cL6pjmzqsH2PBn93LZRWbeUmglGo7t7RJCa4HOEgjDQn8ZRW5ntMa:LLm+Q8Bn93LqbN7Yo7tdM2DBDui

Score
10/10
mysticpersistencestealer

Malware Config

Targets

    • Target

      de0645a844faf35efae106a5eded7e6ac55077e6e2b8627f493014b106439c39

    • Size

      1.2MB

    • MD5

      40fd33049bda52f89908650de8958d4f

    • SHA1

      49e4ae354f0cd4e04dadb26450f98c562ea05a5b

    • SHA256

      de0645a844faf35efae106a5eded7e6ac55077e6e2b8627f493014b106439c39

    • SHA512

      ea77fb8e265e787cf0d4768bcbf4cf7bccea32e683840f0729bbd541ecf1251f428a9a63a910462a7f85966376480057bbf69323383c977b7544f7c49ddeb0be

    • SSDEEP

      24576:cyA+cL6pjmzqsH2PBn93LZRWbeUmglGo7t7RJCa4HOEgjDQn8ZRW5ntMa:LLm+Q8Bn93LqbN7Yo7tdM2DBDui

    Score
    10/10
    mysticpersistencestealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks