General
-
Target
79cef7c42464dee645953830f6336c05d5cf5f399fb80dfa2f30c7e5e33c2cc9
-
Size
639KB
-
Sample
210419-xtg3sck1fn
-
MD5
8ba1a2fc9069b4ad375f33a092b1fcb6
-
SHA1
2722e10bc97b9cac0d0622c00628e91b606b4630
-
SHA256
79cef7c42464dee645953830f6336c05d5cf5f399fb80dfa2f30c7e5e33c2cc9
-
SHA512
e157b261701e0663dd27442846df0a075a0d0630c6d8fe1191088d034097cac8d59fdd13ad5632de988620268c186e91603b8dce2f74c1404162834722b0abc5
Static task
static1
Behavioral task
behavioral1
Sample
79cef7c42464dee645953830f6336c05d5cf5f399fb80dfa2f30c7e5e33c2cc9.dll
Resource
win7v20210408
Malware Config
Extracted
dridex
10444
146.185.170.249:443
62.75.251.60:6601
185.148.168.25:2303
Targets
-
-
Target
79cef7c42464dee645953830f6336c05d5cf5f399fb80dfa2f30c7e5e33c2cc9
-
Size
639KB
-
MD5
8ba1a2fc9069b4ad375f33a092b1fcb6
-
SHA1
2722e10bc97b9cac0d0622c00628e91b606b4630
-
SHA256
79cef7c42464dee645953830f6336c05d5cf5f399fb80dfa2f30c7e5e33c2cc9
-
SHA512
e157b261701e0663dd27442846df0a075a0d0630c6d8fe1191088d034097cac8d59fdd13ad5632de988620268c186e91603b8dce2f74c1404162834722b0abc5
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-