Overview

overview

7

Static

static

3

dridex

windows10-1703-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    855d12d134022410a7a9f05e0ded33d0e64ef97a215b2d8e1f2938674dd54dad

  • Size

    2.5MB

  • Sample

    231126-rmtccshh74

  • MD5

    38725c54c214c317fd0a82b49bb3fee5

  • SHA1

    9f70fc351f4963e011410776c53adc622097619e

  • SHA256

    855d12d134022410a7a9f05e0ded33d0e64ef97a215b2d8e1f2938674dd54dad

  • SHA512

    6ce142efe3f26694e9a0f4c195952d8a8ea2e7da61629358816c2765f315036fd1828803a74241ab3f52ba58ddbb698a81cd54a3c02c12e7fdd8764672132241

  • SSDEEP

    49152:02bERBctaqluW8thU0kW2LTxMlR6bJl7Z/EqFtP9E5gWwXo4MLVH4RY0E:ZO0lqtWJZMlkJlNdVE5nwCVYlE

Score
7/10
discovery

Malware Config

Targets

    • Target

      855d12d134022410a7a9f05e0ded33d0e64ef97a215b2d8e1f2938674dd54dad

    • Size

      2.5MB

    • MD5

      38725c54c214c317fd0a82b49bb3fee5

    • SHA1

      9f70fc351f4963e011410776c53adc622097619e

    • SHA256

      855d12d134022410a7a9f05e0ded33d0e64ef97a215b2d8e1f2938674dd54dad

    • SHA512

      6ce142efe3f26694e9a0f4c195952d8a8ea2e7da61629358816c2765f315036fd1828803a74241ab3f52ba58ddbb698a81cd54a3c02c12e7fdd8764672132241

    • SSDEEP

      49152:02bERBctaqluW8thU0kW2LTxMlR6bJl7Z/EqFtP9E5gWwXo4MLVH4RY0E:ZO0lqtWJZMlkJlNdVE5nwCVYlE

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks