General
-
Target
db8e55ebb6e5e8107db3157a2c085c32721dcefbdf7d564781ad7a1495d0fe6c
-
Size
188KB
-
Sample
210224-t6k3csfeza
-
MD5
cd5a5f2ef81e0f22b40dbf8b3a8747d8
-
SHA1
ece569992010b73fd7de10619dab489922043264
-
SHA256
db8e55ebb6e5e8107db3157a2c085c32721dcefbdf7d564781ad7a1495d0fe6c
-
SHA512
ffe3c4b499175af79a304f1b88527840cfdbacd5b7854b50be9ef087eac8b3c1a54c782a513870a31b17990c8b453128a8130bded487394b487d487193bdcc86
Static task
static1
Behavioral task
behavioral1
Sample
db8e55ebb6e5e8107db3157a2c085c32721dcefbdf7d564781ad7a1495d0fe6c.dll
Resource
win7v20201028
Malware Config
Extracted
dridex
111
209.151.236.42:443
91.121.94.86:8172
5.189.144.136:6516
Targets
-
-
Target
db8e55ebb6e5e8107db3157a2c085c32721dcefbdf7d564781ad7a1495d0fe6c
-
Size
188KB
-
MD5
cd5a5f2ef81e0f22b40dbf8b3a8747d8
-
SHA1
ece569992010b73fd7de10619dab489922043264
-
SHA256
db8e55ebb6e5e8107db3157a2c085c32721dcefbdf7d564781ad7a1495d0fe6c
-
SHA512
ffe3c4b499175af79a304f1b88527840cfdbacd5b7854b50be9ef087eac8b3c1a54c782a513870a31b17990c8b453128a8130bded487394b487d487193bdcc86
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-