General
-
Target
s.bin
-
Size
540KB
-
Sample
201118-l94vl7sede
-
MD5
bf44f8eef8654d6b2ce11c302351e02a
-
SHA1
a6fd4a421ca6041f91cb7ce63a6c33f2a1fde0c1
-
SHA256
581a2419d8e96d3367e5ead5f7de2c743133db0e69e6f3721d4a99c9ebafda36
-
SHA512
83d6cd60373366d501130b0c23db0c74fde4f7151d8a89a9e2987321f784b72c71517c1aaa24f7a8cf11cd9a3e8028b7771d27795b1f7f80778ecb66316b8678
Static task
static1
Behavioral task
behavioral1
Sample
s.bin.dll
Resource
win7v20201028
Malware Config
Extracted
dridex
10444
162.241.44.26:9443
192.232.229.53:4443
77.220.64.34:443
193.90.12.121:3098
Targets
-
-
Target
s.bin
-
Size
540KB
-
MD5
bf44f8eef8654d6b2ce11c302351e02a
-
SHA1
a6fd4a421ca6041f91cb7ce63a6c33f2a1fde0c1
-
SHA256
581a2419d8e96d3367e5ead5f7de2c743133db0e69e6f3721d4a99c9ebafda36
-
SHA512
83d6cd60373366d501130b0c23db0c74fde4f7151d8a89a9e2987321f784b72c71517c1aaa24f7a8cf11cd9a3e8028b7771d27795b1f7f80778ecb66316b8678
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-