General
-
Target
9a7d044288b8ee3d623e3f5a0c8ba7c3bcfad61be9a6dfdc1fd3a2fde4aaaa69
-
Size
196KB
-
Sample
210304-frwzn126t2
-
MD5
771c9e85ae9c04b92d8874dadba4ec68
-
SHA1
cf7b830589137a82e8a5117094d0b068c9a61d8a
-
SHA256
9a7d044288b8ee3d623e3f5a0c8ba7c3bcfad61be9a6dfdc1fd3a2fde4aaaa69
-
SHA512
5a88280bfaed4366c8d937bad551594efacbbcf0c989195a0ddffdac3b77421a28fe95d12f4d893954d66fb8be0c300941b75960226af37aefdf633b433836ab
Static task
static1
Malware Config
Extracted
dridex
111
37.247.35.132:443
50.243.30.51:6601
162.241.204.234:6516
Targets
-
-
Target
9a7d044288b8ee3d623e3f5a0c8ba7c3bcfad61be9a6dfdc1fd3a2fde4aaaa69
-
Size
196KB
-
MD5
771c9e85ae9c04b92d8874dadba4ec68
-
SHA1
cf7b830589137a82e8a5117094d0b068c9a61d8a
-
SHA256
9a7d044288b8ee3d623e3f5a0c8ba7c3bcfad61be9a6dfdc1fd3a2fde4aaaa69
-
SHA512
5a88280bfaed4366c8d937bad551594efacbbcf0c989195a0ddffdac3b77421a28fe95d12f4d893954d66fb8be0c300941b75960226af37aefdf633b433836ab
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-