General
-
Target
fsbbr2FFDiSdxw.dll
-
Size
236KB
-
Sample
210121-7m8g64wwv2
-
MD5
2060370529b2fa369f301e210cd630ba
-
SHA1
09e1b37ccac66d68f299cec6e6517cf47b9f1c9a
-
SHA256
39a05f74f92f6552734c04faebde326200f02f60b5c10a1062195a04ab94da8d
-
SHA512
292c75723638415874c9a112ef0c3287dc42d0628aab857e3b785ef3aefa360d3116949852548ced1ffe335731e82eada4908c2da840ea9b6ad55446f7092594
Static task
static1
Behavioral task
behavioral1
Sample
fsbbr2FFDiSdxw.dll
Resource
win7v20201028
Malware Config
Extracted
dridex
111
77.220.64.40:443
8.4.9.152:3786
185.246.87.202:3098
Targets
-
-
Target
fsbbr2FFDiSdxw.dll
-
Size
236KB
-
MD5
2060370529b2fa369f301e210cd630ba
-
SHA1
09e1b37ccac66d68f299cec6e6517cf47b9f1c9a
-
SHA256
39a05f74f92f6552734c04faebde326200f02f60b5c10a1062195a04ab94da8d
-
SHA512
292c75723638415874c9a112ef0c3287dc42d0628aab857e3b785ef3aefa360d3116949852548ced1ffe335731e82eada4908c2da840ea9b6ad55446f7092594
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-