General
-
Target
485755f937f3931fa7813b01b6cd2200ebbf05ee59fb174a17116a6d9925882d
-
Size
170KB
-
Sample
210611-p1qr3lrksx
-
MD5
1a08a499fede2e2f18a1ccff94cb6d98
-
SHA1
f6e16a9026599ba0b987c0abdc1cce5a255a5ddc
-
SHA256
485755f937f3931fa7813b01b6cd2200ebbf05ee59fb174a17116a6d9925882d
-
SHA512
7a70297f3edf112965d9e6f0a2a177037122579bfb067227c1508419aad10f809c11379f63dc54ba589dc2928db22143d71d4393831a701185f5905680cd12ab
Static task
static1
Malware Config
Extracted
dridex
22201
210.65.244.187:443
162.241.41.92:2303
46.231.204.10:8172
185.183.159.100:4125
Targets
-
-
Target
485755f937f3931fa7813b01b6cd2200ebbf05ee59fb174a17116a6d9925882d
-
Size
170KB
-
MD5
1a08a499fede2e2f18a1ccff94cb6d98
-
SHA1
f6e16a9026599ba0b987c0abdc1cce5a255a5ddc
-
SHA256
485755f937f3931fa7813b01b6cd2200ebbf05ee59fb174a17116a6d9925882d
-
SHA512
7a70297f3edf112965d9e6f0a2a177037122579bfb067227c1508419aad10f809c11379f63dc54ba589dc2928db22143d71d4393831a701185f5905680cd12ab
-
Suspicious use of NtCreateProcessExOtherParentProcess
-