Overview

overview

7

Static

static

3

dridex

windows10-1703-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3b1edb2e0c615709d3212dacc0531c11185c9f49bb39ce60acad8898dcdb4a9c

  • Size

    5.6MB

  • Sample

    231119-mvpa6ahe78

  • MD5

    c240e8a0664a662b9cf6f5bfb2cff6b6

  • SHA1

    98570e721e00b771a07c02c17c4b1be5ddbf002f

  • SHA256

    3b1edb2e0c615709d3212dacc0531c11185c9f49bb39ce60acad8898dcdb4a9c

  • SHA512

    528037a52a40e3f801562d63b3ac8735b4620f5468e18bb9fe91f4c1a56ec22795ae8f0948e46908f24944fe360f8f896f0c9b55a19a8f76789b6ae3dd3aa7c7

  • SSDEEP

    98304:GiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:jRm1syxacY48eda2TMpQdZ9nc+fyhNjG

Score
7/10
discovery

Malware Config

Targets

    • Target

      3b1edb2e0c615709d3212dacc0531c11185c9f49bb39ce60acad8898dcdb4a9c

    • Size

      5.6MB

    • MD5

      c240e8a0664a662b9cf6f5bfb2cff6b6

    • SHA1

      98570e721e00b771a07c02c17c4b1be5ddbf002f

    • SHA256

      3b1edb2e0c615709d3212dacc0531c11185c9f49bb39ce60acad8898dcdb4a9c

    • SHA512

      528037a52a40e3f801562d63b3ac8735b4620f5468e18bb9fe91f4c1a56ec22795ae8f0948e46908f24944fe360f8f896f0c9b55a19a8f76789b6ae3dd3aa7c7

    • SSDEEP

      98304:GiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:jRm1syxacY48eda2TMpQdZ9nc+fyhNjG

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks