General
-
Target
ef3889c1d6626e8b8bcc04f981a5e4cad006b6b3a088f16b477b33070746bf6c
-
Size
196KB
-
Sample
210403-f6l3dfm53x
-
MD5
62098a4f3834aee27f4e837aac4e5268
-
SHA1
9d234884167cf7d64cf5ecf757d73487ed15ff0e
-
SHA256
ef3889c1d6626e8b8bcc04f981a5e4cad006b6b3a088f16b477b33070746bf6c
-
SHA512
a7e4cea1879d72a20ee3af93330767e6ff84776d16a39a47a1239c6ab4990a9981fdd919b45062db101ec6ac78848ac40a0f2fb278c77f8f2b60092004cd9e2c
Static task
static1
Malware Config
Extracted
dridex
111
37.247.35.132:443
50.243.30.51:6601
162.241.204.234:6516
Targets
-
-
Target
ef3889c1d6626e8b8bcc04f981a5e4cad006b6b3a088f16b477b33070746bf6c
-
Size
196KB
-
MD5
62098a4f3834aee27f4e837aac4e5268
-
SHA1
9d234884167cf7d64cf5ecf757d73487ed15ff0e
-
SHA256
ef3889c1d6626e8b8bcc04f981a5e4cad006b6b3a088f16b477b33070746bf6c
-
SHA512
a7e4cea1879d72a20ee3af93330767e6ff84776d16a39a47a1239c6ab4990a9981fdd919b45062db101ec6ac78848ac40a0f2fb278c77f8f2b60092004cd9e2c
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-