Overview

overview

7

Static

static

7

dridex

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    04d6d3ec056f03179782070ab38d407197ff2e2fc5c943da11de18d0085b7f3b

  • Size

    6.0MB

  • Sample

    231211-vt4cpaeeb3

  • MD5

    7603117e8e1611e887b8c6fccbdb9d4e

  • SHA1

    64634c62c3eb74bbc5cdec26082dd612a304e45d

  • SHA256

    04d6d3ec056f03179782070ab38d407197ff2e2fc5c943da11de18d0085b7f3b

  • SHA512

    b42d6479e51e35729bb8f98c5d990ddf6804393781f854cbfcf4188d2904c9fb69ff736917cd7c6e36af622a0e93eef854a47cc3fc47bc5f154d530f2d155f55

  • SSDEEP

    98304:wCUQbcTwemgpj6KqG6F6MNl4or9cOFOoKc3lZsuavzeh/QYU+LR87CiFj4:HtbCLpjfqx/j9dF3livQ/Y4R87dq

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      04d6d3ec056f03179782070ab38d407197ff2e2fc5c943da11de18d0085b7f3b

    • Size

      6.0MB

    • MD5

      7603117e8e1611e887b8c6fccbdb9d4e

    • SHA1

      64634c62c3eb74bbc5cdec26082dd612a304e45d

    • SHA256

      04d6d3ec056f03179782070ab38d407197ff2e2fc5c943da11de18d0085b7f3b

    • SHA512

      b42d6479e51e35729bb8f98c5d990ddf6804393781f854cbfcf4188d2904c9fb69ff736917cd7c6e36af622a0e93eef854a47cc3fc47bc5f154d530f2d155f55

    • SSDEEP

      98304:wCUQbcTwemgpj6KqG6F6MNl4or9cOFOoKc3lZsuavzeh/QYU+LR87CiFj4:HtbCLpjfqx/j9dF3livQ/Y4R87dq

    Score
    7/10
    vmprotect

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks