General
-
Target
8e2ecfdf6802a22ef4a346a78ece663397753b31c600db7e0555802421b38067
-
Size
196KB
-
Sample
210403-rhmawff3bx
-
MD5
62ef67a989a2fcd3a44a03a56f247d7c
-
SHA1
24cf41ef8b71f9cd8d9f2367b997ac2322a4e544
-
SHA256
8e2ecfdf6802a22ef4a346a78ece663397753b31c600db7e0555802421b38067
-
SHA512
5e84f91c9118c3236256b6171280afa335f38722b7b4736befc755351bc594af630de9a2a1496b30e35ef9f78e4a66b52100ecaf1c199d2a8d1d3a67447c4a76
Static task
static1
Malware Config
Extracted
dridex
111
37.247.35.132:443
50.243.30.51:6601
162.241.204.234:6516
Targets
-
-
Target
8e2ecfdf6802a22ef4a346a78ece663397753b31c600db7e0555802421b38067
-
Size
196KB
-
MD5
62ef67a989a2fcd3a44a03a56f247d7c
-
SHA1
24cf41ef8b71f9cd8d9f2367b997ac2322a4e544
-
SHA256
8e2ecfdf6802a22ef4a346a78ece663397753b31c600db7e0555802421b38067
-
SHA512
5e84f91c9118c3236256b6171280afa335f38722b7b4736befc755351bc594af630de9a2a1496b30e35ef9f78e4a66b52100ecaf1c199d2a8d1d3a67447c4a76
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-