General
-
Target
5a85a0cba2d2b88854a3bfaee6a9951529df817c6ef74340f6b03744415fe326
-
Size
966KB
-
Sample
210419-5t5p8s9x56
-
MD5
2d0077e893f6cf6dfebe4693e65715be
-
SHA1
55430f87cd8e91b29ce0d5f0a198fbab8149569d
-
SHA256
5a85a0cba2d2b88854a3bfaee6a9951529df817c6ef74340f6b03744415fe326
-
SHA512
15d3664e3ac7b61da7f652c3bae6e008a030fcd21f1c7d249e7c53ffd5dccb2e948ae4bd6ed3547ffb3a7298e5a45a135e9eae91679d7ce37a5d3fd0dc24fb43
Static task
static1
Behavioral task
behavioral1
Sample
5a85a0cba2d2b88854a3bfaee6a9951529df817c6ef74340f6b03744415fe326.dll
Resource
win7v20210408
Malware Config
Extracted
dridex
10444
146.185.170.249:443
62.75.251.60:6601
185.148.168.25:2303
Targets
-
-
Target
5a85a0cba2d2b88854a3bfaee6a9951529df817c6ef74340f6b03744415fe326
-
Size
966KB
-
MD5
2d0077e893f6cf6dfebe4693e65715be
-
SHA1
55430f87cd8e91b29ce0d5f0a198fbab8149569d
-
SHA256
5a85a0cba2d2b88854a3bfaee6a9951529df817c6ef74340f6b03744415fe326
-
SHA512
15d3664e3ac7b61da7f652c3bae6e008a030fcd21f1c7d249e7c53ffd5dccb2e948ae4bd6ed3547ffb3a7298e5a45a135e9eae91679d7ce37a5d3fd0dc24fb43
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-