General
-
Target
f41061d04396c9c32ed95497181382a6cb8038c384dd4bbbc2af2fb9ffb53fbd
-
Size
608KB
-
Sample
211014-ht87qagcck
-
MD5
bdec636f7fdaea8b025d55519aa31fa2
-
SHA1
af3da345fbdb4ea15129e4be58039bdb1c86f6d2
-
SHA256
f41061d04396c9c32ed95497181382a6cb8038c384dd4bbbc2af2fb9ffb53fbd
-
SHA512
649e093078798a6c1bd092ffec8587ac8304fe641219e0fb18f0e869732bf6d0dc6f8cf9d8d6f2176aaefd1e1025ca307c543c2d9c43266f6a9350507e323a97
Static task
static1
Malware Config
Extracted
dridex
10444
174.128.245.202:443
51.83.3.52:13786
69.64.50.41:6602
Targets
-
-
Target
f41061d04396c9c32ed95497181382a6cb8038c384dd4bbbc2af2fb9ffb53fbd
-
Size
608KB
-
MD5
bdec636f7fdaea8b025d55519aa31fa2
-
SHA1
af3da345fbdb4ea15129e4be58039bdb1c86f6d2
-
SHA256
f41061d04396c9c32ed95497181382a6cb8038c384dd4bbbc2af2fb9ffb53fbd
-
SHA512
649e093078798a6c1bd092ffec8587ac8304fe641219e0fb18f0e869732bf6d0dc6f8cf9d8d6f2176aaefd1e1025ca307c543c2d9c43266f6a9350507e323a97
-
Blocklisted process makes network request
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-