General
-
Target
xka8p2.rar
-
Size
311KB
-
Sample
210113-ttjj5t9c82
-
MD5
ae994d2a6193a4e256aa86ce0b61175b
-
SHA1
e067113be50304e76cad4aee6b5bee638938b2e4
-
SHA256
3997bf3cf7485ae768f7a23aaa9004f73b0594550611138906821f9b4dc9bce7
-
SHA512
dfaf1af31639a358219d6f0bcbf0858d397d5ce082ce9a7282c4c2c2e5f3c8190c3b9f08fa4dcff0d97faacb367679b7d27c738c11e4821bcccafe7bad5ecffd
Static task
static1
Behavioral task
behavioral1
Sample
xka8p2.rar.dll
Resource
win7v20201028
Malware Config
Extracted
dridex
10444
77.220.64.37:443
80.86.91.27:3308
5.100.228.233:3389
46.105.131.65:1512
Targets
-
-
Target
xka8p2.rar
-
Size
311KB
-
MD5
ae994d2a6193a4e256aa86ce0b61175b
-
SHA1
e067113be50304e76cad4aee6b5bee638938b2e4
-
SHA256
3997bf3cf7485ae768f7a23aaa9004f73b0594550611138906821f9b4dc9bce7
-
SHA512
dfaf1af31639a358219d6f0bcbf0858d397d5ce082ce9a7282c4c2c2e5f3c8190c3b9f08fa4dcff0d97faacb367679b7d27c738c11e4821bcccafe7bad5ecffd
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-