General
-
Target
54a48461c5eebcb2c0ad360835633f993cf4c94956f0b4bd7a2c9c9d365c5e6a
-
Size
196KB
-
Sample
210403-6eyxswtqw6
-
MD5
38bdbcdeaa8345ad8a5bcfa186912423
-
SHA1
207f6d77de463a62ca370e91eb08598c2a4ef753
-
SHA256
54a48461c5eebcb2c0ad360835633f993cf4c94956f0b4bd7a2c9c9d365c5e6a
-
SHA512
72a178782f857017b80d789d624cd14faff08edd6ecd71f2d439d0539cacc17fde6272dd021e7ad712015d34b18b954f614ee40c1b96c33e96cb0b468712498d
Static task
static1
Behavioral task
behavioral1
Sample
54a48461c5eebcb2c0ad360835633f993cf4c94956f0b4bd7a2c9c9d365c5e6a.dll
Resource
win7v20201028
Malware Config
Extracted
dridex
111
37.247.35.132:443
50.243.30.51:6601
162.241.204.234:6516
Targets
-
-
Target
54a48461c5eebcb2c0ad360835633f993cf4c94956f0b4bd7a2c9c9d365c5e6a
-
Size
196KB
-
MD5
38bdbcdeaa8345ad8a5bcfa186912423
-
SHA1
207f6d77de463a62ca370e91eb08598c2a4ef753
-
SHA256
54a48461c5eebcb2c0ad360835633f993cf4c94956f0b4bd7a2c9c9d365c5e6a
-
SHA512
72a178782f857017b80d789d624cd14faff08edd6ecd71f2d439d0539cacc17fde6272dd021e7ad712015d34b18b954f614ee40c1b96c33e96cb0b468712498d
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-