General
-
Target
dc2f5832d15959bc2987e41a3e59cec2a9748ad0351f89c0e99a17db2c116c18
-
Size
188KB
-
Sample
210303-8mlaxahwxx
-
MD5
3c12d7d2166bcf88edbf5ea6d83fdf6f
-
SHA1
743666c493d8b5613f4e89b930ddd8f37203931d
-
SHA256
dc2f5832d15959bc2987e41a3e59cec2a9748ad0351f89c0e99a17db2c116c18
-
SHA512
2913e3470011e0628e79dc96f82d600628b7d501858023f4a486a86afa2b372db91123ee181c75f53da127828a27cb3675d23f734066876fc397fd02fb14ddb5
Static task
static1
Behavioral task
behavioral1
Sample
dc2f5832d15959bc2987e41a3e59cec2a9748ad0351f89c0e99a17db2c116c18.dll
Resource
win7v20201028
Malware Config
Extracted
dridex
111
116.251.211.158:443
216.10.242.142:6601
37.247.35.137:6601
Targets
-
-
Target
dc2f5832d15959bc2987e41a3e59cec2a9748ad0351f89c0e99a17db2c116c18
-
Size
188KB
-
MD5
3c12d7d2166bcf88edbf5ea6d83fdf6f
-
SHA1
743666c493d8b5613f4e89b930ddd8f37203931d
-
SHA256
dc2f5832d15959bc2987e41a3e59cec2a9748ad0351f89c0e99a17db2c116c18
-
SHA512
2913e3470011e0628e79dc96f82d600628b7d501858023f4a486a86afa2b372db91123ee181c75f53da127828a27cb3675d23f734066876fc397fd02fb14ddb5
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-