General
-
Target
1fc05a06a468c60eaef126a45b6b17e5bf31580c922f4ffd5787d2eeb1648a81
-
Size
188KB
-
Sample
210224-p78k6fmg1n
-
MD5
6a6372d9817a2ff4d90dde4ed5aa3443
-
SHA1
d462cd6e6302b769429e5c65bb6fcd3c4bc0e4c9
-
SHA256
1fc05a06a468c60eaef126a45b6b17e5bf31580c922f4ffd5787d2eeb1648a81
-
SHA512
c5e5bde36ffb5de5f1468184aacebbcc7e1ceb45fd97631807b00f8166b8a0ebd5837baeb157f5c00e7c857b6d8db389098f6cdfa498b91488c149aedbcd7912
Static task
static1
Behavioral task
behavioral1
Sample
1fc05a06a468c60eaef126a45b6b17e5bf31580c922f4ffd5787d2eeb1648a81.dll
Resource
win7v20201028
Malware Config
Extracted
dridex
111
209.151.236.42:443
91.121.94.86:8172
5.189.144.136:6516
Targets
-
-
Target
1fc05a06a468c60eaef126a45b6b17e5bf31580c922f4ffd5787d2eeb1648a81
-
Size
188KB
-
MD5
6a6372d9817a2ff4d90dde4ed5aa3443
-
SHA1
d462cd6e6302b769429e5c65bb6fcd3c4bc0e4c9
-
SHA256
1fc05a06a468c60eaef126a45b6b17e5bf31580c922f4ffd5787d2eeb1648a81
-
SHA512
c5e5bde36ffb5de5f1468184aacebbcc7e1ceb45fd97631807b00f8166b8a0ebd5837baeb157f5c00e7c857b6d8db389098f6cdfa498b91488c149aedbcd7912
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-