General
-
Target
8e2ecfdf6802a22ef4a346a78ece663397753b31c600db7e0555802421b38067
-
Size
196KB
-
Sample
210403-4fjb7j51r2
-
MD5
62ef67a989a2fcd3a44a03a56f247d7c
-
SHA1
24cf41ef8b71f9cd8d9f2367b997ac2322a4e544
-
SHA256
8e2ecfdf6802a22ef4a346a78ece663397753b31c600db7e0555802421b38067
-
SHA512
5e84f91c9118c3236256b6171280afa335f38722b7b4736befc755351bc594af630de9a2a1496b30e35ef9f78e4a66b52100ecaf1c199d2a8d1d3a67447c4a76
Static task
static1
Behavioral task
behavioral1
Sample
8e2ecfdf6802a22ef4a346a78ece663397753b31c600db7e0555802421b38067.dll
Resource
win7v20201028
Behavioral task
behavioral2
Sample
8e2ecfdf6802a22ef4a346a78ece663397753b31c600db7e0555802421b38067.dll
Resource
win10v20201028
Malware Config
Extracted
dridex
111
37.247.35.132:443
50.243.30.51:6601
162.241.204.234:6516
Targets
-
-
Target
8e2ecfdf6802a22ef4a346a78ece663397753b31c600db7e0555802421b38067
-
Size
196KB
-
MD5
62ef67a989a2fcd3a44a03a56f247d7c
-
SHA1
24cf41ef8b71f9cd8d9f2367b997ac2322a4e544
-
SHA256
8e2ecfdf6802a22ef4a346a78ece663397753b31c600db7e0555802421b38067
-
SHA512
5e84f91c9118c3236256b6171280afa335f38722b7b4736befc755351bc594af630de9a2a1496b30e35ef9f78e4a66b52100ecaf1c199d2a8d1d3a67447c4a76
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-