General
-
Target
647dc37a153a595cb25a82860396a93d6a46d3946902050a0a809833d9941a7b
-
Size
196KB
-
Sample
210624-ysnp64dtk6
-
MD5
3bd0d6ac0accdc2b594fa935bba200c6
-
SHA1
15c8bc14fa698cb4caf4835068a0ef79d7207ccc
-
SHA256
647dc37a153a595cb25a82860396a93d6a46d3946902050a0a809833d9941a7b
-
SHA512
a113da9b244ea37a510b6fc7357f325716c77a810c61ef2666dbf1bd7f3d87e97dbfc7db0c1d2feb775231d8df089dcc9c02e59c40bfb8aae7ca5554dbf40a3f
Static task
static1
Malware Config
Extracted
dridex
111
37.247.35.132:443
50.243.30.51:6601
162.241.204.234:6516
Targets
-
-
Target
647dc37a153a595cb25a82860396a93d6a46d3946902050a0a809833d9941a7b
-
Size
196KB
-
MD5
3bd0d6ac0accdc2b594fa935bba200c6
-
SHA1
15c8bc14fa698cb4caf4835068a0ef79d7207ccc
-
SHA256
647dc37a153a595cb25a82860396a93d6a46d3946902050a0a809833d9941a7b
-
SHA512
a113da9b244ea37a510b6fc7357f325716c77a810c61ef2666dbf1bd7f3d87e97dbfc7db0c1d2feb775231d8df089dcc9c02e59c40bfb8aae7ca5554dbf40a3f
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-