General
-
Target
0d493087de634c70a569bc144c8bfbc54c01ba9e3f88cb04a4030db5143c4213
-
Size
734KB
-
Sample
210419-czvvc1yc1e
-
MD5
b8436c70543d3fc427ba86ff4494d16d
-
SHA1
65f0d5fb00faa2f32d140a8ff6ac8beea1a805d7
-
SHA256
0d493087de634c70a569bc144c8bfbc54c01ba9e3f88cb04a4030db5143c4213
-
SHA512
238a9ade8fe105449e8040e6fe11a4e82366c373926b3a01278820c363b2b4734e4557946040931561fcf6956616e6b0e98fdb1f22591860b89aa88496596834
Static task
static1
Behavioral task
behavioral1
Sample
0d493087de634c70a569bc144c8bfbc54c01ba9e3f88cb04a4030db5143c4213.dll
Resource
win7v20210410
Malware Config
Extracted
dridex
10444
146.185.170.249:443
62.75.251.60:6601
185.148.168.25:2303
Targets
-
-
Target
0d493087de634c70a569bc144c8bfbc54c01ba9e3f88cb04a4030db5143c4213
-
Size
734KB
-
MD5
b8436c70543d3fc427ba86ff4494d16d
-
SHA1
65f0d5fb00faa2f32d140a8ff6ac8beea1a805d7
-
SHA256
0d493087de634c70a569bc144c8bfbc54c01ba9e3f88cb04a4030db5143c4213
-
SHA512
238a9ade8fe105449e8040e6fe11a4e82366c373926b3a01278820c363b2b4734e4557946040931561fcf6956616e6b0e98fdb1f22591860b89aa88496596834
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-