General
-
Target
b3eff4beef576f4ee0b70503313c1a5f5140811353cd071e86fc01f6ca983f77
-
Size
188KB
-
Sample
210224-19wag6qkn6
-
MD5
3a6cd781e927f8c6f6769bfcccff8937
-
SHA1
ee3fe90aea9e519f663074cde2fc749b1444b780
-
SHA256
b3eff4beef576f4ee0b70503313c1a5f5140811353cd071e86fc01f6ca983f77
-
SHA512
d78f1efe19294bc761f79c35fe3090a822bf0936e1f3b9bbd61e57cbdc49c0f1db1324464f68e77ee6db9cdbda141acd7bff3a351a75696202d937fc2e99578d
Static task
static1
Behavioral task
behavioral1
Sample
b3eff4beef576f4ee0b70503313c1a5f5140811353cd071e86fc01f6ca983f77.dll
Resource
win7v20201028
Malware Config
Extracted
dridex
111
209.151.236.42:443
91.121.94.86:8172
5.189.144.136:6516
Targets
-
-
Target
b3eff4beef576f4ee0b70503313c1a5f5140811353cd071e86fc01f6ca983f77
-
Size
188KB
-
MD5
3a6cd781e927f8c6f6769bfcccff8937
-
SHA1
ee3fe90aea9e519f663074cde2fc749b1444b780
-
SHA256
b3eff4beef576f4ee0b70503313c1a5f5140811353cd071e86fc01f6ca983f77
-
SHA512
d78f1efe19294bc761f79c35fe3090a822bf0936e1f3b9bbd61e57cbdc49c0f1db1324464f68e77ee6db9cdbda141acd7bff3a351a75696202d937fc2e99578d
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-