Overview

overview

7

Static

static

3

DripLite By Brvjo.exe

windows10-2004-x64

7

DripLite By Brvjo.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    DripLite By Brvjo.exe
  • Size 105.7MB
  • Sample261024-aj2e5aws3q
  • SHA256 bb8236391219066d1329310f81d074b254f5da18d259c7924fba8147adfddacf
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasiondiscoverypyinstaller

Malware Config

Targets

    • Target
      DripLite By Brvjo.exe
    • Size 105.7MB
    • SHA256 bb8236391219066d1329310f81d074b254f5da18d259c7924fba8147adfddacf
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    defense_evasiondiscovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Writes a Windows system DLL name to a user directory

      A module named after a system DLL outside System32 can be loaded instead of the real one by a program searching that directory.

      defense_evasion

    • Discovers running processes

      Running process information can be used to identify security tools or plan follow-on actions.

      discovery

    • Suspicious use of NtSetInformationThreadHideFromDebugger

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1
T1059

Persistence

Hijack Execution Flow

1
T1574

DLL Search Order Hijacking

1
T1574.001

Privilege Escalation

Hijack Execution Flow

1
T1574

DLL Search Order Hijacking

1
T1574.001

Defense Evasion

Debugger Evasion

1
T1622

Hijack Execution Flow

1
T1574

DLL Search Order Hijacking

1
T1574.001

Masquerading

1
T1036

Match Legitimate Name or Location

1
T1036.005

Credential Access

Discovery

Browser Information Discovery

1
T1217

Debugger Evasion

1
T1622

Process Discovery

1
T1057

Query Registry

2
T1012

System Information Discovery

4
T1082

System Network Configuration Discovery

1
T1016

System Network Connections Discovery

1
T1049

System Time Discovery

1
T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks