Overview

overview

7

Static

static

3

dridex

windows10-1703-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a25f11a4a32aad5545061e7f5fb4a62d1c8dd3c4acf08e7df6a0b1debc11ab4e

  • Size

    2.9MB

  • Sample

    231124-def56sff9s

  • MD5

    4cd639f963650f2bfb7c62b8654bf717

  • SHA1

    870100d4bfa6b7bbdf304b7984c5e3ad3349f1cf

  • SHA256

    a25f11a4a32aad5545061e7f5fb4a62d1c8dd3c4acf08e7df6a0b1debc11ab4e

  • SHA512

    8a8e6de0c84117b75e8b2234b0ef32519c11ff0bd155df69a93b3dc521afa717e44501af0761a0b8893ecb550fe9afa2e038667a0078b4bde86c3817c3fcca4c

  • SSDEEP

    49152:D2jrjz+ZNL6x3OoqXinu3JTWWkrL/G708RmUM6UE/LSfblkkvQ1E5RY0E:qzzKiQSu3WetRmUoE/LSfblkA+E5lE

Score
7/10
discovery

Malware Config

Targets

    • Target

      a25f11a4a32aad5545061e7f5fb4a62d1c8dd3c4acf08e7df6a0b1debc11ab4e

    • Size

      2.9MB

    • MD5

      4cd639f963650f2bfb7c62b8654bf717

    • SHA1

      870100d4bfa6b7bbdf304b7984c5e3ad3349f1cf

    • SHA256

      a25f11a4a32aad5545061e7f5fb4a62d1c8dd3c4acf08e7df6a0b1debc11ab4e

    • SHA512

      8a8e6de0c84117b75e8b2234b0ef32519c11ff0bd155df69a93b3dc521afa717e44501af0761a0b8893ecb550fe9afa2e038667a0078b4bde86c3817c3fcca4c

    • SSDEEP

      49152:D2jrjz+ZNL6x3OoqXinu3JTWWkrL/G708RmUM6UE/LSfblkkvQ1E5RY0E:qzzKiQSu3WetRmUoE/LSfblkA+E5lE

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks