General
-
Target
4109f894deca301629b0e7895a37630dedf9f595dd99777d99fbe96454864752
-
Size
923KB
-
Sample
210419-bhp1zqhen6
-
MD5
a14bcdc32c2a0ff2b0e3047d95bdb4a7
-
SHA1
59006c8bd58d371f66b8d382ed1e0b55bedce274
-
SHA256
4109f894deca301629b0e7895a37630dedf9f595dd99777d99fbe96454864752
-
SHA512
75e59153e9622714bdd7d9d7a5b8befbb509c731d1d12f79a23fe7d498114754966e56255a58f882c7717eedef3232d9de7f3ab08ef2d64f829fac6478f1da64
Static task
static1
Malware Config
Extracted
dridex
10444
146.185.170.249:443
62.75.251.60:6601
185.148.168.25:2303
Targets
-
-
Target
4109f894deca301629b0e7895a37630dedf9f595dd99777d99fbe96454864752
-
Size
923KB
-
MD5
a14bcdc32c2a0ff2b0e3047d95bdb4a7
-
SHA1
59006c8bd58d371f66b8d382ed1e0b55bedce274
-
SHA256
4109f894deca301629b0e7895a37630dedf9f595dd99777d99fbe96454864752
-
SHA512
75e59153e9622714bdd7d9d7a5b8befbb509c731d1d12f79a23fe7d498114754966e56255a58f882c7717eedef3232d9de7f3ab08ef2d64f829fac6478f1da64
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-