Overview

overview

10

Static

static

10

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    66c8e00f46e83d91c5920cf9638b03b8b9095d22ed58744f2abc9fdebc550c9f

  • Size

    1.3MB

  • Sample

    231130-xs6sjagf51

  • MD5

    5a8c19f0298f074877ae3f0fdcf4e40f

  • SHA1

    7bf4408ad28f32a1ec63840a8a2c59916e77df81

  • SHA256

    66c8e00f46e83d91c5920cf9638b03b8b9095d22ed58744f2abc9fdebc550c9f

  • SHA512

    00ffdde9b5d270b379ff10c6524aa2a1ba4e62d9a4de8ef931d41a4b3045e8cc079905edcef5e3fe927126b365b676b7b0e75c0c6d16d29e32f6a122f2e37625

  • SSDEEP

    24576:Og+tmm6ugk+8JujxZ2YPBzK5tUMxdEvYt2RnG:OgrjpvsuXK5BsSP

Score
10/10
purelogsxmrigzgratminerratstealer

Malware Config

Targets

    • Target

      66c8e00f46e83d91c5920cf9638b03b8b9095d22ed58744f2abc9fdebc550c9f

    • Size

      1.3MB

    • MD5

      5a8c19f0298f074877ae3f0fdcf4e40f

    • SHA1

      7bf4408ad28f32a1ec63840a8a2c59916e77df81

    • SHA256

      66c8e00f46e83d91c5920cf9638b03b8b9095d22ed58744f2abc9fdebc550c9f

    • SHA512

      00ffdde9b5d270b379ff10c6524aa2a1ba4e62d9a4de8ef931d41a4b3045e8cc079905edcef5e3fe927126b365b676b7b0e75c0c6d16d29e32f6a122f2e37625

    • SSDEEP

      24576:Og+tmm6ugk+8JujxZ2YPBzK5tUMxdEvYt2RnG:OgrjpvsuXK5BsSP

    Score
    10/10
    purelogsxmrigzgratminerratstealer

    • Detect PureLogs payload

    • Detect ZGRat V1

    • PureLogs

      PureLogs is an infostealer written in C#.

      stealerpurelogs

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks