Overview

overview

10

Static

static

10

Drip_Lite.exe

windows7-x64

7

Drip_Lite.exe

windows10-2004-x64

9

Resubmissions

18-08-2024 03:21

240818-dwg4ssvhqp 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Drip_lite.rar

  • Size

    15.5MB

  • Sample

    240818-dwg4ssvhqp

  • MD5

    7aee7cee8ed157796d19f0b0708a750b

  • SHA1

    3b1db186768b65c1ccb3039a0f57d69fbaa90de5

  • SHA256

    44a323578d2e192944b05a8b98d447142a8af08c0af52451d986477697ff6253

  • SHA512

    ac94f2820b5baeb065c7a01ff81acd593d2a92ee9c83db8deaf5c1c562b0bc2288d8f77a68e906ea947961414624bf49d961ddd5718c9296614f28d6e1aeda5d

  • SSDEEP

    393216:gt/JF/qyTTKkJe13Pg/3ytbN4wz6RlyaOkZ:2BFlbJe13Ps4ewz6Rlyg

Score
10/10
crealstealercredential_accessdiscoverypyinstallerspywarestealer

Malware Config

Targets

    • Target

      Drip_Lite.exe

    • Size

      16.0MB

    • MD5

      aaf018a6380e63af117c7c9f053118e5

    • SHA1

      33385a397ae47f098b3e23dc825f9838583d7cd5

    • SHA256

      cfd08ee4956e067f5283276f0cbe640d8984ce16fcbfcf0efdd0fa94e2d98328

    • SHA512

      899b4e015cb70894e66c85544e1b418797e67929bf485b3ef0c1ca9fed1859dbfbfad177e790a9ce06bab8ad01f65cbbae1e77150ffbc1111de63c8fa1f04dea

    • SSDEEP

      393216:4AXGD2ntpUTLfhJsW+eGQRCMTozGxu8C0ibfz6e5SR1bLXiWCNi:4A2DaHUTLJSW+e5RLoztZ026e5qKVNi

    Score
    9/10
    credential_accessdiscoveryspywarestealer

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Drops startup file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Unsecured Credentials: Credentials In Files

      Steal credentials from unsecured files.

      credential_accessstealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Enumerates processes with tasklist

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks