General
-
Target
353b8dd09d93ae66264c55e038c756bf.dll
-
Size
599KB
-
Sample
201118-eel7qavkds
-
MD5
353b8dd09d93ae66264c55e038c756bf
-
SHA1
0a9f66a155ccbef2fa4f0528018b9b6e6096fb93
-
SHA256
af3c57b18d35f88f076c5b15fd7cc814d4e7724037158d7e5a3facf9bece3d26
-
SHA512
d4d767470ca70e7d53e11b859827d1ae3997ce8156724dc08c1e925aeb5af3b774964b49830de0a647230db36c13ed0aae8f93cf7282b867337833ffada64a40
Behavioral task
behavioral1
Sample
353b8dd09d93ae66264c55e038c756bf.dll
Resource
win7v20201028
Malware Config
Extracted
dridex
10444
77.220.64.53:443
172.96.190.154:4664
209.126.111.137:33443
167.99.158.82:33443
Targets
-
-
Target
353b8dd09d93ae66264c55e038c756bf.dll
-
Size
599KB
-
MD5
353b8dd09d93ae66264c55e038c756bf
-
SHA1
0a9f66a155ccbef2fa4f0528018b9b6e6096fb93
-
SHA256
af3c57b18d35f88f076c5b15fd7cc814d4e7724037158d7e5a3facf9bece3d26
-
SHA512
d4d767470ca70e7d53e11b859827d1ae3997ce8156724dc08c1e925aeb5af3b774964b49830de0a647230db36c13ed0aae8f93cf7282b867337833ffada64a40
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-