General
-
Target
5a5bbd8c04147c15575a07e24bdef22e
-
Size
604KB
-
Sample
211013-qz83xaeaer
-
MD5
5a5bbd8c04147c15575a07e24bdef22e
-
SHA1
e4506ef09698fb678f9e11190723499e0ee3b0a7
-
SHA256
88a94091ec39cf0fcb60f326e81f2a12ac40c6f41072f04dd0088d9c435e2d31
-
SHA512
11eeabbec6979fadd57d7c8834574b929abdf671d418044042dae8f2e0a24ebeb68a5876eb6394b720c5ae8858792ea8515926d13e1cf4b5a3bd390caabd818c
Static task
static1
Behavioral task
behavioral1
Sample
5a5bbd8c04147c15575a07e24bdef22e.dll
Resource
win7-en-20210920
Malware Config
Extracted
dridex
10444
174.128.245.202:443
51.83.3.52:13786
69.64.50.41:6602
Targets
-
-
Target
5a5bbd8c04147c15575a07e24bdef22e
-
Size
604KB
-
MD5
5a5bbd8c04147c15575a07e24bdef22e
-
SHA1
e4506ef09698fb678f9e11190723499e0ee3b0a7
-
SHA256
88a94091ec39cf0fcb60f326e81f2a12ac40c6f41072f04dd0088d9c435e2d31
-
SHA512
11eeabbec6979fadd57d7c8834574b929abdf671d418044042dae8f2e0a24ebeb68a5876eb6394b720c5ae8858792ea8515926d13e1cf4b5a3bd390caabd818c
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-