General
-
Target
1e730dd44db3c0cc0226b7803dc673678adbccca7a6f7764afb7aa17908102ab
-
Size
188KB
-
Sample
210224-yqm5v76vdj
-
MD5
af7fa4bea998af2934851f2facfa7561
-
SHA1
45acc84e8aaca8d970151d660ade3b7f6342b06a
-
SHA256
1e730dd44db3c0cc0226b7803dc673678adbccca7a6f7764afb7aa17908102ab
-
SHA512
a5ce52e78435b7cf05cdf46e6eb99003761ccbf890ad61c41486e4b5a7b8dd21a958365d9bd4846d88114d318cbc5b760387d077018b2a533c6354395eb1ef2e
Static task
static1
Behavioral task
behavioral1
Sample
1e730dd44db3c0cc0226b7803dc673678adbccca7a6f7764afb7aa17908102ab.dll
Resource
win7v20201028
Malware Config
Extracted
dridex
111
209.151.236.42:443
91.121.94.86:8172
5.189.144.136:6516
Targets
-
-
Target
1e730dd44db3c0cc0226b7803dc673678adbccca7a6f7764afb7aa17908102ab
-
Size
188KB
-
MD5
af7fa4bea998af2934851f2facfa7561
-
SHA1
45acc84e8aaca8d970151d660ade3b7f6342b06a
-
SHA256
1e730dd44db3c0cc0226b7803dc673678adbccca7a6f7764afb7aa17908102ab
-
SHA512
a5ce52e78435b7cf05cdf46e6eb99003761ccbf890ad61c41486e4b5a7b8dd21a958365d9bd4846d88114d318cbc5b760387d077018b2a533c6354395eb1ef2e
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-