General
-
Target
72e94cd95844a1de9dc4254483701be00a00812c6efb224b71c683f8840912b8
-
Size
188KB
-
Sample
210303-hmhh7t7m82
-
MD5
8ea6fec39a1e0414628216a5817c2ec6
-
SHA1
c7a171ad799246c457ca2f355168515af287bd26
-
SHA256
72e94cd95844a1de9dc4254483701be00a00812c6efb224b71c683f8840912b8
-
SHA512
9f5568365de1c1132b213e036e128167a21ddf98ab6bd5c5dcc90fb1ae0ac7e90e18fb5059d8bb5c26a334269a8ea5178d37ed15d9445b84e98c292466da5f5f
Static task
static1
Behavioral task
behavioral1
Sample
72e94cd95844a1de9dc4254483701be00a00812c6efb224b71c683f8840912b8.dll
Resource
win7v20201028
Malware Config
Extracted
dridex
111
116.251.211.158:443
216.10.242.142:6601
37.247.35.137:6601
Targets
-
-
Target
72e94cd95844a1de9dc4254483701be00a00812c6efb224b71c683f8840912b8
-
Size
188KB
-
MD5
8ea6fec39a1e0414628216a5817c2ec6
-
SHA1
c7a171ad799246c457ca2f355168515af287bd26
-
SHA256
72e94cd95844a1de9dc4254483701be00a00812c6efb224b71c683f8840912b8
-
SHA512
9f5568365de1c1132b213e036e128167a21ddf98ab6bd5c5dcc90fb1ae0ac7e90e18fb5059d8bb5c26a334269a8ea5178d37ed15d9445b84e98c292466da5f5f
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-