General
-
Target
8459af77e5ece4c9ba83bd36bd4e0799648513ed5a54849476c6d475b3fc2e86
-
Size
639KB
-
Sample
210419-a2tyhahlwn
-
MD5
585423e871c91c4efa6e2b23b170314d
-
SHA1
e6d4a686d1a119dd08c1dbfe961f60842c4634ca
-
SHA256
8459af77e5ece4c9ba83bd36bd4e0799648513ed5a54849476c6d475b3fc2e86
-
SHA512
e4aa5618647fc4ec8ae107208bb4e3c97991d40f12d95d6b1195b1d2f3d055e2a5cc7ff72935ef154549be6bc9799d24f4c1629ac079442d3771f1a213018dbf
Static task
static1
Behavioral task
behavioral1
Sample
8459af77e5ece4c9ba83bd36bd4e0799648513ed5a54849476c6d475b3fc2e86.dll
Resource
win7v20210410
Malware Config
Extracted
dridex
10444
146.185.170.249:443
62.75.251.60:6601
185.148.168.25:2303
Targets
-
-
Target
8459af77e5ece4c9ba83bd36bd4e0799648513ed5a54849476c6d475b3fc2e86
-
Size
639KB
-
MD5
585423e871c91c4efa6e2b23b170314d
-
SHA1
e6d4a686d1a119dd08c1dbfe961f60842c4634ca
-
SHA256
8459af77e5ece4c9ba83bd36bd4e0799648513ed5a54849476c6d475b3fc2e86
-
SHA512
e4aa5618647fc4ec8ae107208bb4e3c97991d40f12d95d6b1195b1d2f3d055e2a5cc7ff72935ef154549be6bc9799d24f4c1629ac079442d3771f1a213018dbf
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-