General
-
Target
c87fce2e5c2e8682924f080ba2eaa6224628502c34fbe8ff94959a0dc4d5afd1
-
Size
923KB
-
Sample
210420-jq7j351hj2
-
MD5
0bc8062c38ad87810d19855311fb03e9
-
SHA1
4f7dfc05f06f241d89043a675d7b300dd5e660bc
-
SHA256
c87fce2e5c2e8682924f080ba2eaa6224628502c34fbe8ff94959a0dc4d5afd1
-
SHA512
bf43a772c1338b7892686fdbd31f45f3752f1c056f05bbb20d6302ff601ed027aa05fd9cdedefa5ac638e518684c1bee536c420f6207a13f02bf722ad2b7d5fe
Static task
static1
Malware Config
Extracted
dridex
10444
146.185.170.249:443
62.75.251.60:6601
185.148.168.25:2303
Targets
-
-
Target
c87fce2e5c2e8682924f080ba2eaa6224628502c34fbe8ff94959a0dc4d5afd1
-
Size
923KB
-
MD5
0bc8062c38ad87810d19855311fb03e9
-
SHA1
4f7dfc05f06f241d89043a675d7b300dd5e660bc
-
SHA256
c87fce2e5c2e8682924f080ba2eaa6224628502c34fbe8ff94959a0dc4d5afd1
-
SHA512
bf43a772c1338b7892686fdbd31f45f3752f1c056f05bbb20d6302ff601ed027aa05fd9cdedefa5ac638e518684c1bee536c420f6207a13f02bf722ad2b7d5fe
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-