General
-
Target
78fefe4cb80f5c6357bd5aa7bedaaa7fd18aca0c8b83f205ff31f40dd7d22e9b
-
Size
188KB
-
Sample
210303-ms1yd46vrn
-
MD5
426dc1b325fb713fb52f260bb7b00f35
-
SHA1
165f9eb968801cdf62b08414f699d349f086e49b
-
SHA256
78fefe4cb80f5c6357bd5aa7bedaaa7fd18aca0c8b83f205ff31f40dd7d22e9b
-
SHA512
f9c4fe825698de14c11dba1c0e66a251222018e001695527211ec5e450aa0a6d19f31ce5d2679903a1e0019d4a3f7750d9062e5b80b931b8ae1b3f9478ff080b
Static task
static1
Behavioral task
behavioral1
Sample
78fefe4cb80f5c6357bd5aa7bedaaa7fd18aca0c8b83f205ff31f40dd7d22e9b.dll
Resource
win7v20201028
Malware Config
Extracted
dridex
111
116.251.211.158:443
216.10.242.142:6601
37.247.35.137:6601
Targets
-
-
Target
78fefe4cb80f5c6357bd5aa7bedaaa7fd18aca0c8b83f205ff31f40dd7d22e9b
-
Size
188KB
-
MD5
426dc1b325fb713fb52f260bb7b00f35
-
SHA1
165f9eb968801cdf62b08414f699d349f086e49b
-
SHA256
78fefe4cb80f5c6357bd5aa7bedaaa7fd18aca0c8b83f205ff31f40dd7d22e9b
-
SHA512
f9c4fe825698de14c11dba1c0e66a251222018e001695527211ec5e450aa0a6d19f31ce5d2679903a1e0019d4a3f7750d9062e5b80b931b8ae1b3f9478ff080b
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-