Overview

overview

8

Static

static

3

dridex

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    969548d1e9e8801d576c0f1162406b30c25f0b6ea505ffa07b33ca228dcd52ed

  • Size

    291KB

  • Sample

    231117-pg6z6aac6v

  • MD5

    65a0a8fa7345baf09ca9beb86f0e49b1

  • SHA1

    bcbb29d41c3260789d552506ff17b4e65fc6d4e0

  • SHA256

    969548d1e9e8801d576c0f1162406b30c25f0b6ea505ffa07b33ca228dcd52ed

  • SHA512

    87dbbfa716a4b43e5caece7e2985e7ef0373af3349ec78fb9bc47737c0e515df29d9978f5e6285d911ffa350c17a4b62a76fa8e38cd40ac607c080d6590d1edb

  • SSDEEP

    3072:d/BWZL5U6rFC5/TYrOuqfcGB0w+Q6s8b4AuR+aBJwKRqKQq39i3Fb:d0L66rIpYrOuL1w/eH+JSK3M

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      969548d1e9e8801d576c0f1162406b30c25f0b6ea505ffa07b33ca228dcd52ed

    • Size

      291KB

    • MD5

      65a0a8fa7345baf09ca9beb86f0e49b1

    • SHA1

      bcbb29d41c3260789d552506ff17b4e65fc6d4e0

    • SHA256

      969548d1e9e8801d576c0f1162406b30c25f0b6ea505ffa07b33ca228dcd52ed

    • SHA512

      87dbbfa716a4b43e5caece7e2985e7ef0373af3349ec78fb9bc47737c0e515df29d9978f5e6285d911ffa350c17a4b62a76fa8e38cd40ac607c080d6590d1edb

    • SSDEEP

      3072:d/BWZL5U6rFC5/TYrOuqfcGB0w+Q6s8b4AuR+aBJwKRqKQq39i3Fb:d0L66rIpYrOuL1w/eH+JSK3M

    Score
    8/10
    discoveryspywarestealer

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks