General
-
Target
6bb140706e18caafd9b4725cd34d73ab7fb3b277e6d9903d051bba99aadfec64
-
Size
196KB
-
Sample
210304-v7syad4fh6
-
MD5
eb3bb74fbac64c57c50a27d6923710ff
-
SHA1
fac15003ba3240aa011bfb5762456646406dda33
-
SHA256
6bb140706e18caafd9b4725cd34d73ab7fb3b277e6d9903d051bba99aadfec64
-
SHA512
6362285d74b4ef6bc4fc648f22ffd9e7eb5a902bf45b89893da467b8206515ac3e7e2a2abae246f14220ef3b4c30cbb9fb2b29504d14fa469cad130a623483dd
Static task
static1
Behavioral task
behavioral1
Sample
6bb140706e18caafd9b4725cd34d73ab7fb3b277e6d9903d051bba99aadfec64.dll
Resource
win7v20201028
Malware Config
Extracted
dridex
111
37.247.35.132:443
50.243.30.51:6601
162.241.204.234:6516
Targets
-
-
Target
6bb140706e18caafd9b4725cd34d73ab7fb3b277e6d9903d051bba99aadfec64
-
Size
196KB
-
MD5
eb3bb74fbac64c57c50a27d6923710ff
-
SHA1
fac15003ba3240aa011bfb5762456646406dda33
-
SHA256
6bb140706e18caafd9b4725cd34d73ab7fb3b277e6d9903d051bba99aadfec64
-
SHA512
6362285d74b4ef6bc4fc648f22ffd9e7eb5a902bf45b89893da467b8206515ac3e7e2a2abae246f14220ef3b4c30cbb9fb2b29504d14fa469cad130a623483dd
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-