General
-
Target
1d8b5bf20413995710b67e5d4f1b252688d61407fba6acc44ffccc86f05f68b8
-
Size
196KB
-
Sample
210303-q4aq9glthj
-
MD5
4e7e5be4cca7fc312944f293137f3222
-
SHA1
6d38daf21bc0786dc1a8788c5ee5b0707c77a65a
-
SHA256
1d8b5bf20413995710b67e5d4f1b252688d61407fba6acc44ffccc86f05f68b8
-
SHA512
104e0150240dd88af10258d89e738c52df45663415f94f566ed46bc43619517960fc935246713fc7bfb259757431dfe1fd02350b3fbf75cfe11e66b20cd508d1
Static task
static1
Behavioral task
behavioral1
Sample
1d8b5bf20413995710b67e5d4f1b252688d61407fba6acc44ffccc86f05f68b8.dll
Resource
win7v20201028
Malware Config
Extracted
dridex
111
37.247.35.132:443
50.243.30.51:6601
162.241.204.234:6516
Targets
-
-
Target
1d8b5bf20413995710b67e5d4f1b252688d61407fba6acc44ffccc86f05f68b8
-
Size
196KB
-
MD5
4e7e5be4cca7fc312944f293137f3222
-
SHA1
6d38daf21bc0786dc1a8788c5ee5b0707c77a65a
-
SHA256
1d8b5bf20413995710b67e5d4f1b252688d61407fba6acc44ffccc86f05f68b8
-
SHA512
104e0150240dd88af10258d89e738c52df45663415f94f566ed46bc43619517960fc935246713fc7bfb259757431dfe1fd02350b3fbf75cfe11e66b20cd508d1
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-