General
-
Target
384d4b7890a652d938b45f877dad622d7618cbc175e38a8fff6541fbd32aea30
-
Size
188KB
-
Sample
210303-8kcbmfbvfn
-
MD5
8fe653d7b19c7d6a15b895807cb1f9cc
-
SHA1
7a54efe5f414f7f71f1aa0249f38517e40348540
-
SHA256
384d4b7890a652d938b45f877dad622d7618cbc175e38a8fff6541fbd32aea30
-
SHA512
4e7999064cbff43ac22debbcc99334f842294fdf5ddd4d4e10579ea7db8f591c69921a5006abcb205eeb6487db3db70e1fc9a7c59499616d9b1e0a56b0273775
Static task
static1
Behavioral task
behavioral1
Sample
384d4b7890a652d938b45f877dad622d7618cbc175e38a8fff6541fbd32aea30.dll
Resource
win7v20201028
Malware Config
Extracted
dridex
111
116.251.211.158:443
216.10.242.142:6601
37.247.35.137:6601
Targets
-
-
Target
384d4b7890a652d938b45f877dad622d7618cbc175e38a8fff6541fbd32aea30
-
Size
188KB
-
MD5
8fe653d7b19c7d6a15b895807cb1f9cc
-
SHA1
7a54efe5f414f7f71f1aa0249f38517e40348540
-
SHA256
384d4b7890a652d938b45f877dad622d7618cbc175e38a8fff6541fbd32aea30
-
SHA512
4e7999064cbff43ac22debbcc99334f842294fdf5ddd4d4e10579ea7db8f591c69921a5006abcb205eeb6487db3db70e1fc9a7c59499616d9b1e0a56b0273775
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-