General
-
Target
k0qt0dibgrar
-
Size
572KB
-
Sample
201103-fft3wxcglx
-
MD5
f6e9f6de099449b84d37f8c9c959c0a3
-
SHA1
407a7e9d982caea11ebb525d1bd51e2617febe74
-
SHA256
4801b61a1dc7a14b4c2efc9840a933b7dbfc595cca11bca2632f7e59a0624c65
-
SHA512
8027bd6e4f7ea23d435fa3654c793b34c715bc2b4a2915df78e4f227d9a3f782de5e7bea86c9dcd8cefd612ac5a8ff4d28f1d3d6c6a3a1d6b89863ef94575fc9
Static task
static1
Malware Config
Extracted
dridex
10444
195.154.237.245:443
46.105.131.73:8172
91.238.160.158:18443
213.183.128.99:3786
Targets
-
-
Target
k0qt0dibgrar
-
Size
572KB
-
MD5
f6e9f6de099449b84d37f8c9c959c0a3
-
SHA1
407a7e9d982caea11ebb525d1bd51e2617febe74
-
SHA256
4801b61a1dc7a14b4c2efc9840a933b7dbfc595cca11bca2632f7e59a0624c65
-
SHA512
8027bd6e4f7ea23d435fa3654c793b34c715bc2b4a2915df78e4f227d9a3f782de5e7bea86c9dcd8cefd612ac5a8ff4d28f1d3d6c6a3a1d6b89863ef94575fc9
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-