General
-
Target
3a9b6f3731229534f9010f0831d3bc30.dll
-
Size
599KB
-
Sample
201117-px1d88p6rn
-
MD5
3a9b6f3731229534f9010f0831d3bc30
-
SHA1
47d086aaab4f6508c3839e3fe165364c20ebbd11
-
SHA256
8cc5a65a8206e82d93604182bb6cd7f72e08a6b45cdf07e6479e493457c0ab12
-
SHA512
d8abcfabf47860b692b0410a132e74480b966a21ecb68bd1e17764529b424fb52770048e2076c64f4af0c8a9bdfec3c4de4801417b5b4e5ebac679058049ff4b
Behavioral task
behavioral1
Sample
3a9b6f3731229534f9010f0831d3bc30.dll
Resource
win7v20201028
Malware Config
Extracted
dridex
10444
77.220.64.53:443
172.96.190.154:4664
209.126.111.137:33443
167.99.158.82:33443
Targets
-
-
Target
3a9b6f3731229534f9010f0831d3bc30.dll
-
Size
599KB
-
MD5
3a9b6f3731229534f9010f0831d3bc30
-
SHA1
47d086aaab4f6508c3839e3fe165364c20ebbd11
-
SHA256
8cc5a65a8206e82d93604182bb6cd7f72e08a6b45cdf07e6479e493457c0ab12
-
SHA512
d8abcfabf47860b692b0410a132e74480b966a21ecb68bd1e17764529b424fb52770048e2076c64f4af0c8a9bdfec3c4de4801417b5b4e5ebac679058049ff4b
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-