Overview

overview

7

Static

static

3

dridex

windows10-1703-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    b712c65144a4c7b6b7f3d7fbcf7e2d294eda645a5fe2748596e80cdbb474f52d

  • Size

    6.9MB

  • Sample

    231211-r2qj1shegn

  • MD5

    0c1ad449ed6364f8ce624391be6b1e35

  • SHA1

    1a34ffbfc54f27c2e03afd7b522aae8f7c74169f

  • SHA256

    b712c65144a4c7b6b7f3d7fbcf7e2d294eda645a5fe2748596e80cdbb474f52d

  • SHA512

    49cd19fc1acc0d04f066503ad6444d610581b09806693ff355bb538fc57098882b80217a16cb1b6dcaf1cfa78f8631e19e624a704ddfbc918f326a34c61ca385

  • SSDEEP

    196608:tDoG3bFqjpLC0TSMLsn33HR83v9i8l7INzj:tDyNLCWZ2HS9iQ7INzj

Score
7/10
discovery

Malware Config

Targets

    • Target

      b712c65144a4c7b6b7f3d7fbcf7e2d294eda645a5fe2748596e80cdbb474f52d

    • Size

      6.9MB

    • MD5

      0c1ad449ed6364f8ce624391be6b1e35

    • SHA1

      1a34ffbfc54f27c2e03afd7b522aae8f7c74169f

    • SHA256

      b712c65144a4c7b6b7f3d7fbcf7e2d294eda645a5fe2748596e80cdbb474f52d

    • SHA512

      49cd19fc1acc0d04f066503ad6444d610581b09806693ff355bb538fc57098882b80217a16cb1b6dcaf1cfa78f8631e19e624a704ddfbc918f326a34c61ca385

    • SSDEEP

      196608:tDoG3bFqjpLC0TSMLsn33HR83v9i8l7INzj:tDyNLCWZ2HS9iQ7INzj

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks