General
-
Target
f6a31958348105fbfc8a471c3f6798721b3b75ada0fd652a8b4c0fad745648ea
-
Size
188KB
-
Sample
210224-2nyq4f4ljn
-
MD5
dc65d793fe0d3f63e671ce5b2b872ca6
-
SHA1
77fabb7682db66c7a5121a274662dcbdaf3f72fa
-
SHA256
f6a31958348105fbfc8a471c3f6798721b3b75ada0fd652a8b4c0fad745648ea
-
SHA512
0a5874097bf14a49e8af7821f5c1c9c9af3f816c6ecfb40fdf50a5a3ba963367503cd4c48a4968509a9c2abe4bf62947327a1b400d3074d300c0ed3c680d54b8
Static task
static1
Behavioral task
behavioral1
Sample
f6a31958348105fbfc8a471c3f6798721b3b75ada0fd652a8b4c0fad745648ea.dll
Resource
win7v20201028
Malware Config
Extracted
dridex
111
209.151.236.42:443
91.121.94.86:8172
5.189.144.136:6516
Targets
-
-
Target
f6a31958348105fbfc8a471c3f6798721b3b75ada0fd652a8b4c0fad745648ea
-
Size
188KB
-
MD5
dc65d793fe0d3f63e671ce5b2b872ca6
-
SHA1
77fabb7682db66c7a5121a274662dcbdaf3f72fa
-
SHA256
f6a31958348105fbfc8a471c3f6798721b3b75ada0fd652a8b4c0fad745648ea
-
SHA512
0a5874097bf14a49e8af7821f5c1c9c9af3f816c6ecfb40fdf50a5a3ba963367503cd4c48a4968509a9c2abe4bf62947327a1b400d3074d300c0ed3c680d54b8
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-