Overview

overview

10

Static

static

3

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aa16eed6abd2118df6b0670813ae3b9dab59b458bdc76222866c9a9fc0fa1409

  • Size

    1.9MB

  • Sample

    231126-gks9gafc8y

  • MD5

    fe049ddd0ffd2df34da564208aff9cec

  • SHA1

    1df42bae63a1698b6070b198f9dceb3ac2b1338e

  • SHA256

    aa16eed6abd2118df6b0670813ae3b9dab59b458bdc76222866c9a9fc0fa1409

  • SHA512

    b46e677b3366e395a96761c768112acb01acfeacc92bc5f2749a923bcbc33e4ee6a1d9f5156cf6e250e217e79111e576f5567eae2f7eb381ffa2e08162f1ffbc

  • SSDEEP

    49152:T9+v9qBhn3hRk9XkSxV4QFTNXopKJe8FtU+0:5wqBZTk9X7bFTSphIK

Score
10/10
persistencephishingupx

Malware Config

Targets

    • Target

      aa16eed6abd2118df6b0670813ae3b9dab59b458bdc76222866c9a9fc0fa1409

    • Size

      1.9MB

    • MD5

      fe049ddd0ffd2df34da564208aff9cec

    • SHA1

      1df42bae63a1698b6070b198f9dceb3ac2b1338e

    • SHA256

      aa16eed6abd2118df6b0670813ae3b9dab59b458bdc76222866c9a9fc0fa1409

    • SHA512

      b46e677b3366e395a96761c768112acb01acfeacc92bc5f2749a923bcbc33e4ee6a1d9f5156cf6e250e217e79111e576f5567eae2f7eb381ffa2e08162f1ffbc

    • SSDEEP

      49152:T9+v9qBhn3hRk9XkSxV4QFTNXopKJe8FtU+0:5wqBZTk9X7bFTSphIK

    Score
    10/10
    persistencephishingupx

    • Detected phishing page

      phishing

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks