General
-
Target
2cbfa60a5dd07e82905309c94f58e30b16347bc3847e7b4c2295afca1b24f727
-
Size
196KB
-
Sample
210620-mjg74ap3sj
-
MD5
17fd5ed00ab174d9e9948b0754593ab4
-
SHA1
72dc65a76aba38e5fe5431642d90c3944a167c7a
-
SHA256
2cbfa60a5dd07e82905309c94f58e30b16347bc3847e7b4c2295afca1b24f727
-
SHA512
5d254ec63fa6204317974402e017b94e9150c8da938103009f5ca7e86cae336f95e8c750f41c660a62f2e1e2222f356b1e208897f4b4c49b48fe35bd8d5345ee
Static task
static1
Malware Config
Extracted
dridex
111
37.247.35.132:443
50.243.30.51:6601
162.241.204.234:6516
Targets
-
-
Target
2cbfa60a5dd07e82905309c94f58e30b16347bc3847e7b4c2295afca1b24f727
-
Size
196KB
-
MD5
17fd5ed00ab174d9e9948b0754593ab4
-
SHA1
72dc65a76aba38e5fe5431642d90c3944a167c7a
-
SHA256
2cbfa60a5dd07e82905309c94f58e30b16347bc3847e7b4c2295afca1b24f727
-
SHA512
5d254ec63fa6204317974402e017b94e9150c8da938103009f5ca7e86cae336f95e8c750f41c660a62f2e1e2222f356b1e208897f4b4c49b48fe35bd8d5345ee
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-