General
-
Target
769784acd17b14c5f40c1e38be0ba02d.dll
-
Size
539KB
-
Sample
201119-vrd54aprgx
-
MD5
769784acd17b14c5f40c1e38be0ba02d
-
SHA1
c6f94ffc8720649e913e31b23c2f81dd9e1bb455
-
SHA256
c209236632e40ebb907a7d288bf879bf81542cbdc4b2046ae45280c305fdc980
-
SHA512
a571c37e8e4deb7f6bebd596ec89df7953032b49524217677639ff058ad26eb711c1e6b03380a359a2e19c2b2a7d69d13258a220f555b377ae33be77d410c978
Behavioral task
behavioral1
Sample
769784acd17b14c5f40c1e38be0ba02d.dll
Resource
win7v20201028
Malware Config
Extracted
dridex
10444
162.241.44.26:9443
192.232.229.53:4443
77.220.64.34:443
193.90.12.121:3098
Targets
-
-
Target
769784acd17b14c5f40c1e38be0ba02d.dll
-
Size
539KB
-
MD5
769784acd17b14c5f40c1e38be0ba02d
-
SHA1
c6f94ffc8720649e913e31b23c2f81dd9e1bb455
-
SHA256
c209236632e40ebb907a7d288bf879bf81542cbdc4b2046ae45280c305fdc980
-
SHA512
a571c37e8e4deb7f6bebd596ec89df7953032b49524217677639ff058ad26eb711c1e6b03380a359a2e19c2b2a7d69d13258a220f555b377ae33be77d410c978
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-