Overview

overview

7

Static

static

3

dridex

windows10-1703-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    1d125b27f350504fd49e273f096006888a14aea0a6d75dc3f2c33b7651668636

  • Size

    3.3MB

  • Sample

    231127-w3hm1sbe7t

  • MD5

    0ee77bf674d7f1f0c579f0208042e0a9

  • SHA1

    3c3f0937a4dc590f1ebcdcbaf4f035a6e9f702c4

  • SHA256

    1d125b27f350504fd49e273f096006888a14aea0a6d75dc3f2c33b7651668636

  • SHA512

    d16b3839275f5468e1fb34e367b61c575a9af2c1ec82d6226ddaddc67d64b72f63be60883108749a2f72cbedcefa83228b753a62e42814bac9fdd22571c5addd

  • SSDEEP

    98304:VGgdaNnnnRVNmjfJW4N66Lyq/jU/ON6SXFIAlE:DdKnPoW4NHLV/j+ON5XFIAu

Score
7/10
discovery

Malware Config

Targets

    • Target

      1d125b27f350504fd49e273f096006888a14aea0a6d75dc3f2c33b7651668636

    • Size

      3.3MB

    • MD5

      0ee77bf674d7f1f0c579f0208042e0a9

    • SHA1

      3c3f0937a4dc590f1ebcdcbaf4f035a6e9f702c4

    • SHA256

      1d125b27f350504fd49e273f096006888a14aea0a6d75dc3f2c33b7651668636

    • SHA512

      d16b3839275f5468e1fb34e367b61c575a9af2c1ec82d6226ddaddc67d64b72f63be60883108749a2f72cbedcefa83228b753a62e42814bac9fdd22571c5addd

    • SSDEEP

      98304:VGgdaNnnnRVNmjfJW4N66Lyq/jU/ON6SXFIAlE:DdKnPoW4NHLV/j+ON5XFIAu

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks