General
-
Target
39668b9a757b8630bb93a262b37d28af4f93149c4e58fc0f5867ab8a6b02dce0
-
Size
188KB
-
Sample
210303-ad49g8sj9x
-
MD5
8c2873ff2254cfcb93d99e6624a42faa
-
SHA1
35ae7607ba170492222d3b7ead312e3454d9434e
-
SHA256
39668b9a757b8630bb93a262b37d28af4f93149c4e58fc0f5867ab8a6b02dce0
-
SHA512
7ee00ec031591f8894ddb3fd2ff0f24cd233b4b2770d50de63754d53546c1a79784833be5631334d3bba6bd6a353f00657f3e55b47b793ad3c5f2d91a3895aae
Static task
static1
Behavioral task
behavioral1
Sample
39668b9a757b8630bb93a262b37d28af4f93149c4e58fc0f5867ab8a6b02dce0.dll
Resource
win7v20201028
Malware Config
Extracted
dridex
111
116.251.211.158:443
216.10.242.142:6601
37.247.35.137:6601
Targets
-
-
Target
39668b9a757b8630bb93a262b37d28af4f93149c4e58fc0f5867ab8a6b02dce0
-
Size
188KB
-
MD5
8c2873ff2254cfcb93d99e6624a42faa
-
SHA1
35ae7607ba170492222d3b7ead312e3454d9434e
-
SHA256
39668b9a757b8630bb93a262b37d28af4f93149c4e58fc0f5867ab8a6b02dce0
-
SHA512
7ee00ec031591f8894ddb3fd2ff0f24cd233b4b2770d50de63754d53546c1a79784833be5631334d3bba6bd6a353f00657f3e55b47b793ad3c5f2d91a3895aae
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-