General
-
Target
e90708da402aba89dbc768fdd48e5df0e040c56ea1207a11e5a32c89ac9b9f58
-
Size
188KB
-
Sample
210225-xnldnmtqw2
-
MD5
cb1b67268527996a57488637539ede60
-
SHA1
399f44029b2b1b9f223756a553c9755ad034d171
-
SHA256
e90708da402aba89dbc768fdd48e5df0e040c56ea1207a11e5a32c89ac9b9f58
-
SHA512
68d917fe0bd474de6f4e07b0f7a0e3cd9c01ada2ebba6478e1c3e6cc123086e8508f22d9e4e0f5e286fbd6d66e3c23588210689bf85f4429d0cca7aaac728f18
Static task
static1
Malware Config
Extracted
dridex
111
209.151.236.42:443
91.121.94.86:8172
5.189.144.136:6516
Targets
-
-
Target
e90708da402aba89dbc768fdd48e5df0e040c56ea1207a11e5a32c89ac9b9f58
-
Size
188KB
-
MD5
cb1b67268527996a57488637539ede60
-
SHA1
399f44029b2b1b9f223756a553c9755ad034d171
-
SHA256
e90708da402aba89dbc768fdd48e5df0e040c56ea1207a11e5a32c89ac9b9f58
-
SHA512
68d917fe0bd474de6f4e07b0f7a0e3cd9c01ada2ebba6478e1c3e6cc123086e8508f22d9e4e0f5e286fbd6d66e3c23588210689bf85f4429d0cca7aaac728f18
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-