General
-
Target
7efec75e89d3cbffb5d0b44a62ffde1f2d9c6ab733c2f572e824b4755c3986b2
-
Size
923KB
-
Sample
210420-qp91ftaj4a
-
MD5
1027d5d393f3d9df94d6e9c1f058d899
-
SHA1
9bd8b03c157bdf8b2d2e161b130eaec8fc0b2d38
-
SHA256
7efec75e89d3cbffb5d0b44a62ffde1f2d9c6ab733c2f572e824b4755c3986b2
-
SHA512
ab42e0d9c251d144856c505dc327c575093e81d8b33b80c9d360bbe9804b813905b197d983ac93ebbe3af3c18ec06069cab997ed9f48cec17fedcd46999f221a
Static task
static1
Malware Config
Extracted
dridex
10444
146.185.170.249:443
62.75.251.60:6601
185.148.168.25:2303
Targets
-
-
Target
7efec75e89d3cbffb5d0b44a62ffde1f2d9c6ab733c2f572e824b4755c3986b2
-
Size
923KB
-
MD5
1027d5d393f3d9df94d6e9c1f058d899
-
SHA1
9bd8b03c157bdf8b2d2e161b130eaec8fc0b2d38
-
SHA256
7efec75e89d3cbffb5d0b44a62ffde1f2d9c6ab733c2f572e824b4755c3986b2
-
SHA512
ab42e0d9c251d144856c505dc327c575093e81d8b33b80c9d360bbe9804b813905b197d983ac93ebbe3af3c18ec06069cab997ed9f48cec17fedcd46999f221a
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-