General
-
Target
f045bc5d0dc4890be3163fa236c403dab3d444e92fd5ddc0356dbf3f25f829af
-
Size
830KB
-
Sample
210207-1495g9m5b6
-
MD5
8c1c54884b90c015330ef19c0cb0a4fc
-
SHA1
e222675107a78e19648479a3a994f63fcc58f2a2
-
SHA256
f045bc5d0dc4890be3163fa236c403dab3d444e92fd5ddc0356dbf3f25f829af
-
SHA512
bf4cbee52dfe8c7dd5ab33a8b8e121d9d9cc92b2ebf720026dc3dd4e48f16bb8a5c0970cf7a4dc18b547c3ed4632ae48b1628f46c85436d0dc947baaf886b4e3
Static task
static1
Malware Config
Extracted
dridex
10555
146.164.126.197:443
69.16.193.166:9443
193.90.12.122:3098
157.245.103.132:14043
Targets
-
-
Target
f045bc5d0dc4890be3163fa236c403dab3d444e92fd5ddc0356dbf3f25f829af
-
Size
830KB
-
MD5
8c1c54884b90c015330ef19c0cb0a4fc
-
SHA1
e222675107a78e19648479a3a994f63fcc58f2a2
-
SHA256
f045bc5d0dc4890be3163fa236c403dab3d444e92fd5ddc0356dbf3f25f829af
-
SHA512
bf4cbee52dfe8c7dd5ab33a8b8e121d9d9cc92b2ebf720026dc3dd4e48f16bb8a5c0970cf7a4dc18b547c3ed4632ae48b1628f46c85436d0dc947baaf886b4e3
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-