General
-
Target
a1b14e952a770dafb8ce9f50a3384a7da61e0ee0281aa7340680c14eecbc7793
-
Size
196KB
-
Sample
210304-mvrj9ptb32
-
MD5
5b47ae2be46b08d04796ffa7d8ae732e
-
SHA1
830f3f929afb0bf26c21d4d04c5a635bf0361321
-
SHA256
a1b14e952a770dafb8ce9f50a3384a7da61e0ee0281aa7340680c14eecbc7793
-
SHA512
8c0be95b92cd314abe03ea5247d990d537397bb6ba76f99cd4680b2639cdef54c8a1ab8c4b49adee3247a11100c43ea0cfd11b10ff70bae440a0b64e32e46e1b
Static task
static1
Behavioral task
behavioral1
Sample
a1b14e952a770dafb8ce9f50a3384a7da61e0ee0281aa7340680c14eecbc7793.dll
Resource
win7v20201028
Malware Config
Extracted
dridex
111
37.247.35.132:443
50.243.30.51:6601
162.241.204.234:6516
Targets
-
-
Target
a1b14e952a770dafb8ce9f50a3384a7da61e0ee0281aa7340680c14eecbc7793
-
Size
196KB
-
MD5
5b47ae2be46b08d04796ffa7d8ae732e
-
SHA1
830f3f929afb0bf26c21d4d04c5a635bf0361321
-
SHA256
a1b14e952a770dafb8ce9f50a3384a7da61e0ee0281aa7340680c14eecbc7793
-
SHA512
8c0be95b92cd314abe03ea5247d990d537397bb6ba76f99cd4680b2639cdef54c8a1ab8c4b49adee3247a11100c43ea0cfd11b10ff70bae440a0b64e32e46e1b
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-