General
-
Target
bc6a1086dc70c9b4daf3aede77f5a6de.dll
-
Size
539KB
-
Sample
201119-542fzgrszn
-
MD5
bc6a1086dc70c9b4daf3aede77f5a6de
-
SHA1
e491822425fa66e97101c1f81fc7893ff55cf191
-
SHA256
77419f5d237715b7664ae53e806dea7465cdb6159f76a462fc31fcd731db5f2b
-
SHA512
3823f0a979cef5d7e1b86eb2c188244e1fc4d19b10358fb905a180e1dfa31aaf5e8236e068ca21a6c80fd3aacd12e50214608561b3391dc16aa1861ec02d0e9d
Static task
static1
Behavioral task
behavioral1
Sample
bc6a1086dc70c9b4daf3aede77f5a6de.dll
Resource
win7v20201028
Malware Config
Extracted
dridex
10444
162.241.44.26:9443
192.232.229.53:4443
77.220.64.34:443
193.90.12.121:3098
Targets
-
-
Target
bc6a1086dc70c9b4daf3aede77f5a6de.dll
-
Size
539KB
-
MD5
bc6a1086dc70c9b4daf3aede77f5a6de
-
SHA1
e491822425fa66e97101c1f81fc7893ff55cf191
-
SHA256
77419f5d237715b7664ae53e806dea7465cdb6159f76a462fc31fcd731db5f2b
-
SHA512
3823f0a979cef5d7e1b86eb2c188244e1fc4d19b10358fb905a180e1dfa31aaf5e8236e068ca21a6c80fd3aacd12e50214608561b3391dc16aa1861ec02d0e9d
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-