Overview

overview

7

Static

static

3

dridex

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9a5037e6a7d8aa5e8f5785c9355f6ed2a08b7dc68bcb6f0219a7a535111e9a3f

  • Size

    2.5MB

  • Sample

    231126-ryn7saaa24

  • MD5

    1429e42c4a2abe28407878a388d6649e

  • SHA1

    135e1603d0e7892c1c735113c4f1662095fb6df5

  • SHA256

    9a5037e6a7d8aa5e8f5785c9355f6ed2a08b7dc68bcb6f0219a7a535111e9a3f

  • SHA512

    65698c2ce95811a81ed3b0eeed89d56008516b2cbfe5e23340cc38d9a73f967fb3b640c3bd455e04a32c714451cffe8a9b56acfffcd646132d585e434e2b857d

  • SSDEEP

    49152:82bERBctaqluW8thU0kW2LTxMlR6bJl7Z/EqFtP9E5gWwXo4MLVH4RY0E:xO0lqtWJZMlkJlNdVE5nwCVYlE

Score
7/10
discovery

Malware Config

Targets

    • Target

      9a5037e6a7d8aa5e8f5785c9355f6ed2a08b7dc68bcb6f0219a7a535111e9a3f

    • Size

      2.5MB

    • MD5

      1429e42c4a2abe28407878a388d6649e

    • SHA1

      135e1603d0e7892c1c735113c4f1662095fb6df5

    • SHA256

      9a5037e6a7d8aa5e8f5785c9355f6ed2a08b7dc68bcb6f0219a7a535111e9a3f

    • SHA512

      65698c2ce95811a81ed3b0eeed89d56008516b2cbfe5e23340cc38d9a73f967fb3b640c3bd455e04a32c714451cffe8a9b56acfffcd646132d585e434e2b857d

    • SSDEEP

      49152:82bERBctaqluW8thU0kW2LTxMlR6bJl7Z/EqFtP9E5gWwXo4MLVH4RY0E:xO0lqtWJZMlkJlNdVE5nwCVYlE

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks