General
-
Target
01cdb9f348a73bf0e81aca0864548c4d1ba215f83418d47e2b885b57d3973ce4
-
Size
188KB
-
Sample
210224-m3cr68dj62
-
MD5
c44a51809cd56d848ca27b2fb9cc45f8
-
SHA1
f22fdbc4d0535cc356bcf6a5965fb652c0cab8f5
-
SHA256
01cdb9f348a73bf0e81aca0864548c4d1ba215f83418d47e2b885b57d3973ce4
-
SHA512
abdce9282f8ffbaaddd810c14560dac9f8f8f4ccc0324c8d1adf79b4a7ed72cdf1fb01ed59105ab229b5b5ccdff00e72cb05ce2b2b1a5576dab5b3bcd46ed9da
Static task
static1
Behavioral task
behavioral1
Sample
01cdb9f348a73bf0e81aca0864548c4d1ba215f83418d47e2b885b57d3973ce4.dll
Resource
win7v20201028
Malware Config
Extracted
dridex
111
209.151.236.42:443
91.121.94.86:8172
5.189.144.136:6516
Targets
-
-
Target
01cdb9f348a73bf0e81aca0864548c4d1ba215f83418d47e2b885b57d3973ce4
-
Size
188KB
-
MD5
c44a51809cd56d848ca27b2fb9cc45f8
-
SHA1
f22fdbc4d0535cc356bcf6a5965fb652c0cab8f5
-
SHA256
01cdb9f348a73bf0e81aca0864548c4d1ba215f83418d47e2b885b57d3973ce4
-
SHA512
abdce9282f8ffbaaddd810c14560dac9f8f8f4ccc0324c8d1adf79b4a7ed72cdf1fb01ed59105ab229b5b5ccdff00e72cb05ce2b2b1a5576dab5b3bcd46ed9da
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-