General
-
Target
3a5fc49d7794fedcffbac66dc3b408f81988d39c2f1ed154373127678ff11fb1
-
Size
188KB
-
Sample
210303-95k6dbfpzj
-
MD5
8738ecf4d6fce30211a77855cc929cc6
-
SHA1
2be9dad8b35c191d2476e169c056296bd37caa9f
-
SHA256
3a5fc49d7794fedcffbac66dc3b408f81988d39c2f1ed154373127678ff11fb1
-
SHA512
dca0175fafb61dea069e6bfe423b518d420a2d2db98244cad65bb2b3a8f3553f9e42cbd880cce1abc0f6eff665aeeb6e4b4127ebbacdf324455803c76a26b913
Static task
static1
Behavioral task
behavioral1
Sample
3a5fc49d7794fedcffbac66dc3b408f81988d39c2f1ed154373127678ff11fb1.dll
Resource
win7v20201028
Malware Config
Extracted
dridex
111
116.251.211.158:443
216.10.242.142:6601
37.247.35.137:6601
Targets
-
-
Target
3a5fc49d7794fedcffbac66dc3b408f81988d39c2f1ed154373127678ff11fb1
-
Size
188KB
-
MD5
8738ecf4d6fce30211a77855cc929cc6
-
SHA1
2be9dad8b35c191d2476e169c056296bd37caa9f
-
SHA256
3a5fc49d7794fedcffbac66dc3b408f81988d39c2f1ed154373127678ff11fb1
-
SHA512
dca0175fafb61dea069e6bfe423b518d420a2d2db98244cad65bb2b3a8f3553f9e42cbd880cce1abc0f6eff665aeeb6e4b4127ebbacdf324455803c76a26b913
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-